• About the 419 (Advance Fee) scam
• Phone numbers used by 419 scammers
  
• How to report 419 spam to us
• Frequently asked Questions (419 FAQ)
• Opinions about the scammers and their victims
  
• Domains registered by 419 scammers
  
• Company names mentioned in 419 spam
  
• Names of people mentioned in 419 spam
  
• What can you do when you receive 419 spam
  
  
• Google search: Dead foreigner scam emails
  
• Fake Nigerian bank deposit certificate (JPEG, 200 KB)
  

In these emails the scammers claim to be associates of arrested Russian tycoon Mikhail Khodorkovsky. They seek your help in moving millions of dollars in secret funds through your bank account, promising you a slice of it, but first you must send money to a securities company, lawyer or bank.

As far as we can tell this scam has no connection to Russia whatsoever. The criminals are based in Africa, where all emails are sent from. It's the classic Nigerian fraud with a slightly modified storyline. Payments to the criminals appear to be made through a gang member in Gibraltar and possibly other locations in Europe.

There is also a "Kenneth Lay / Enron" offshoot of the Yukos Oil scam, likelwise unconnected to the real person and company:

• The "Kenneth Lay / ENRON" 419 scam format
  

Are you sick of spam too? Do you want it stopped now? Try jwSpamSpy, the spamfilter we use to track the spammers! Free 30-day trial version available now!

We have received numerous variants of the following scam.

Example #1:

Dear friend,

I have a profiling amount in an excess of US$423M, which I seek your partnership in accommodating for me. You will be rewarded with 40% of the total sum for your partnership. Can you be my partner on this?

INTRODUCTION OF MY SELF:
I am Ms.KIMAEVA LIOUDMILA, a personal secretary to Mikhail Khodorkovsky the richest man in Russia and owner of the following companies: Chairman CEO: YUKOS OIL (Russian Most Largest Oil Company) Chairman CEO: Menatep SBP Bank (A well reputable financial institution with its branches all over the world)

SOURCE OF FUNDS:
The documents of the above funds in question was handed over to me to be used in payment of an American oil merchant for his last oil deal with my boss Mikhail Khodorkovsky. Already the funds have been deposited with ACCESS TRESURY SERVICES PLC UK ,where the final crediting is expected to be carried out. While I was on the process, My Boss got arrested for his involvement on politics in financing the leading and opposing political parties (the Union of Right Forces, led by Boris Nemtsov, and Yabloko, a liberal/social democratic party led by Gregor Yavlinsky) which poses treat to President Vladimir Putin second tenure as Russian president. You can catch more of the story on this
http://newsfromrussia.com/main/2003/11/13/51215.html

YOUR ROLE:
All I need from you is to stand as the beneficiary of the above quoted sum and I will arrange for the documentation which will enable ACCESS TRESURY SERVICES PLC UK transfer the sum to you. I have decided to use this sum to relocate to American continent and never to be connected to any of Mikhail Khodorkovsky conglomerates. The transaction has to be concluded in 2 weeks before Mikhail Khodorkovsky is out on bail.

As soon as I get your willingness to comply through my most private email address [kim303@di-ve.com] I will give you more details.

Thank you very much
Regards

KIMAEVE LIOUDMILA

When contacted, "MRS LIOUDMILA" sent the following reply:

Dear Sir,
Thanks for your prompt response to my mail.This is a very urgent and trustworthy business transaction.
Like I said in my first letter, I am representing Mr. Mikhail Khodorkovsky (m.k.) and would like to ask for your partnership in re-profiling funds over US$450 million I sent our current conversational status to Moscow and have received the authority to proceed with you, and get some clarifications both ways.
Before I am able to give out the information that will enable you access confidential data-pages of mikhail, I would need some information as follows:
(1) What is your net worth?
(2) If you have problems, do they affect your activites you undertake with us as an individual rather than a corporate entity?

(3) Have you handled large funds, and was successfully?
All the answers will be kept very confidential. I must explain why we are asking these questions: If you do have existing profile problems, we may end up inheriting your backlog thus creating a problem where none exist. We intend to liquidate a large investment, and take the capital appr. derivative to provide a new investment fund, under your management, for future investments, thus negating any requirements for taxation or declaration of process for income generation. However, if you do have issues prior to this, it puts anything you do in the light, and thus puts us in uncomfortable situation. As you see, our assets are frozen in switzerland, and while we have excess of USD5b lying there, we are unable to liquidate them, or use them as guarantee for payment of the USD3.5b lying there, we are unable to liquidate them, or use them as guarantee for payment of the USD3.5b backtaxes inflicted on us by the government. If the situation does not improve, we shall be bankrupt before the end of forth quarter this year. The funds being liquidated arise from independent investments of the group, outside the russian soil, so we can legitimately do so, only if this is done quietly. If the authorites hear about this, we shall have to tender it for hearing in international judicial systems, and that will kill us. Hence answer the questions in honesty, and let us know we are confortable with you. We are trying to ensure that you do not put us in any trouble, and likewise, we shall provide you with an input as an entity with no history to the investment, only as a management consultant.
Everybody must be safe now and in the future, hence the questions.
I represent Mr. Mikhail khordokovsky, the former C.E.O of Yukos in Russia. I am sure you know of his predicaments presently. this is why we need your help I received your positive position hence this email to you based on his advice. I am sure you are up to date with m.k and Mr. putin.Mr. p is intent in destroying m.k and his business empire,We are working to get a break from the courts and we will need all the cash call we can muster to hold our head above waters in the coming days. The Gibraltar portfolio is one of our arms yet to be infected by the Moscow led fed tax offensive designed to bring us down and we need you to help us keep it so. We need funds from this portfolio and we can not get the funds on our own without arousing moscow. To avoid this we need to completely reprofile the funds from Gibraltar portfolio in your name so as to turn away Moscow and their ally from us. The complete amount available for you for reprofiling ispresently over $500m and the 40% still stands.
The new beneficiaries of the portfolio will need to offset the back taxes to the authorites in Gibraltar and move the funds online over the internet through a dedicated confidential bank access that I will obtain from m.k in Moscow through existing channel of communications. Once I get your name or company name, address, for identity toreplace that of m.k and reprofile the portfolio accordingly, then I will get the bank access across to you to access the portfolio, pay the back taxes to the authorites and move the funds to another account we will provide you in monte carlo and you keep the 40% as agreed. please write back promptly.I will also suggest you visit these news sites on the internet to be better informed about this projet.
http://newsfromrussia.com/main/2003/11/13/51215.html
http://www.supportmbk.com/mbk/mbk_bio.cfm
http://www.disinfopedia.org/wiki.phtml?title=Mikhail_B._Khodorkovsky
http://www.pbs.org/frontlineworld/stories/moscow/khodorkovskyinterview.html
http://www.fores.com/finance/lists/75/2004/LIR.jhtml?passListId=75& passYear=2004&passListType=Person&uniqueId=M1IF&datatype=Person
http://mikhail_khodorkovsky_society.blogspot.com/
Yours truly
Ms Lioudmila.

NB: Find attached is my company id.
Kindly send yours to me for me to know whom precisely i am dealing with.

The fake ID sent by "KIMAEVA LIOUDMILA" is Here. Note how these guys screwed up on the second line, when they printed the Russian (Cyrillic) name in a Latin font.

The email headers show where this email came from:

Return-Path: <kimaeve707@yahoo.com>
Received: from 68.142.200.64  (HELO web30001.mail.mud.yahoo.com)
 (68.142.200.64) by mta188.mail.dcn.yahoo.com 
 with SMTP; Tue, 08 Feb 2005 03:17:54 -0800
Received: (qmail 81240 invoked by uid 60001); 8 Feb 2005 11:17:53 -0000
Received: from [213.255.255.245]
 by web30001.mail.mud.yahoo.com via HTTP;
 Tue, 08 Feb 2005 03:17:53 PST
Date: Tue, 8 Feb 2005 03:17:53 -0800 (PST)
From: kimaeve lioudmila 
Subject: Thanks for your mail.
To: emailaddress

WHOIS information for IP 213.255.255.245:

     inetnum:      213.255.255.0 - 213.255.255.255
     netname:      SYSTEMPLUS-LIMITED
     org:          ORG-SLS2-RIPE
     descr:        SYSTEMPLUS LIMITED
     country:      NG
     admin-c:      RO534-RIPE
     tech-c:       RO534-RIPE
     status:       ASSIGNED PA
     mnt-by:       SV-MNT
     mnt-lower:    SV-MNT
     changed:      noc@sky-vision.net 20050112
     source:       RIPE
     
     route:        213.255.252.0/22
     descr:        SkyVision Network Services
     origin:       AS25228
     mnt-by:       SV-MNT
     changed:      noc@sky-vision.net 20041013
     source:       RIPE
     
     organisation: ORG-SLS2-RIPE
     org-name:     SYSTEMPLUS LIMITED, SN519
     org-type:     NON-REGISTRY
     address:      IKEJA
     address:      LAGOS
     address:      NIGERIA
     phone:        +23480217777
     e-mail:       rokafor@yahoo.com
     admin-c:      RO534-RIPE
     tech-c:       RO534-RIPE
     mnt-ref:      SV-MNT
     mnt-by:       SV-MNT
     changed:      noc@sky-vision.net 20041229
     source:       RIPE
     
     person:       RICHMOND OKAFOR
     address:      SYSTEMPLUS LTD
     address:      Benin
     address:      Nigeria
     phone:        +23480217777
     fax-no:       +23480217777
     e-mail:       rokafor@yahoo.com
     nic-hdl:      RO534-RIPE
     mnt-by:       SV-MNT
     changed:      noc@sky-vision.net 20040428
     source:       RIPE

Here is a similar one:

Received: (qmail 40412 invoked by uid 0); 20 Feb 2005 17:53:16 -0000
Received: from unknown (HELO smarthost3.tiscali.dk) (62.79.79.29)
  by 10.30.215.42 with AES256-SHA encrypted SMTP; 20 Feb 2005 17:53:16 -0000
Received: from cpmail.dk.tiscali.com (mail.tiscali.dk [212.54.64.159])
	by smarthost3.tiscali.dk (8.13.1/8.13.1) with ESMTP id j1KHnWxQ003285;
	Sun, 20 Feb 2005 18:49:37 +0100 (CET)
	(envelope-from slonb@tiscali.dk)
Received: from [81.199.6.62] by cpmail.dk.tiscali.com
 with HTTP; Sun, 20 Feb 2005 18:50:46 +0100
Date: Sun, 20 Feb 2005 17:50:46 +0000
Message-ID: <41BEE27A0000C451@cpfe2.be.tisc.dk>
From: "slonb@tiscali.dk " 
Subject: HI
Reply-To: slonbreth@yahoo.com
To: emailaddress, jessegore@tiscali.dk
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-15"
Content-Transfer-Encoding: quoted-printable

Attn

I,representing mr. mikhail khodorkovsky (M.K.) and would like to ask for
your partnership in re-profiling funds over US$423 million. I will give
the details, but in summary, the funds are coming via private bank and th=
is
is a legitimate transaction. You will be paid 4% for your "management 
fees".

If you are interested, please write back and I will provide further 
instructions.
Keep this confidential.
Finally, please note that this must be concluded within a short time.
Write me back. I look forward to it.

Mr Olson Berghart.

Sending network (IP 81.199.6.62):

     inetnum:      81.199.6.0 - 81.199.6.255
     netname:      BEST-1
     descr:        Best Communications, Nigeria
     country:      NG
     admin-c:      CN574-RIPE
     tech-c:       CN574-RIPE
     status:       ASSIGNED PA
     notify:       lir@ipplanet.net
     mnt-by:       AS12491-MNT
     mnt-routes:   AS12491-MNT
     changed:      lir@ipplanet.net 20040429
     source:       RIPE
     
     person:       Chukwudi Nweke
     address:      8 Lawason Road, Surulere
     address:      Lagos
     address:      Nigeria
     phone:        +234 1288 5178
     e-mail:       chukwuditc@yahoo.co.uk
     nic-hdl:      CN574-RIPE
     notify:       lir@ipplanet.net
     changed:      lir@ipplanet.net 20040429
     source:       RIPE

"Yuriy Lagutin"

Dear Friend,

Like I said in my first letter, I am representing Mr. Mikhail 
Khodorkovsky and would like to ask for your partnership in 
re-profiling funds over US$450 million. I sent our current 
conversational status to Moscow and have received the authority 
to proceed with you. I am sure you know of his predicaments presently. 
This is why we need your help. I am sure you are up to date with 
Mr. Khordokovsky and Mr. Putin. Mr. Putin is intent on destroying 
Mr. Khordokovsky and his business empire. We are working to get a 
break from the courts and we will need all the cash call we can 
muster to hold our head above waters in the coming days.

As you see, our assets are frozen in switzerland, and while we 
have excess of USD5billion lying there, we are unable to liquidate 
them, or use them as guarantee for payment of the USD3.5billion 
backtaxes inflicted on us by the government. If the situation does 
not improve, we shall be bankrupt before the end of second quarter 
of this year.

The Gibraltar portfolio is one of our arms yet to be infected by 
the Moscow led fed tax offensive designed to bring us down and we 
need you to help us keep it so. We need funds from this portfolio 
and we can not get the funds on our own without arousing Moscow. 
To avoid this we need to completely reprofile the funds from 
Gibraltar portfolio in your name so as to turn away Moscow and 
their ally from us. The complete amount available for reprofiling 
is presently over $450M and you will receive 4% for your assistance.

The funds being liquidated arise from independent investments of 
the group, outside the Russian soil, so we can legitimately do so, 
only if this is done quietly. If the authorites hear about this, 
we shall have to tender it for hearing in international judicial 
systems, and that will kill us. Everybody must be safe now and 
in the future.

Once I get your name or company name, address, telephone and fax 
numbers inclusive as well as banking informations for identity to 
replace that of Mr. Khordokovsky and reprofile the portfolio 
accordingly, then I will get the bank access across to you to 
access the portfolio and move the funds to another account we will 
provide you and you keep the 4% as agreed. Please write back promptly. 

I am presently in London from where I will be handling the transaction 
with you for confidential reasons. My telephone number is 44-704-010-6215 
and fax: 44-870-130-8875. 

Please respond quickly.

Regards,

Yuriy Lagutin.

Message headers:

Received: from [81.199.108.18] by mprdmailfe2.nwk.myway.com
 via HTTP; Mon, 28 Mar 2005 13:05:15 EST
X-AntiAbuse: This header was added to track abuse,
 please include it with any abuse report
X-AntiAbuse: ID = f1f27a2340662796049a9ba35d107332
Reply-To: rvassily_attn@myway.com
From: "Rurik" <rvassily_attn@myway.com>

WHOIS details for sending network (IP 81.199.108.18):

     inetnum:        81.199.108.0 - 81.199.111.255
     netname:        CIDR-INTERCELLULAR-1
     descr:          Intercellular Nigeria Ltd
     country:        NG
     admin-c:        YA95-RIPE
     tech-c:         YA95-RIPE
     status:         ASSIGNED PA
     mnt-by:         AS12491-MNT
     source:         RIPE # Filtered
     
     person:         Yakubu Adamu
     address:        5th Floor, UBA House 57
     address:        Marina, Lagos
     address:        Nigeria
     phone:          +234 14704387
     fax-no:         +234 12643014
     e-mail:         akintolad@intercellular-ng.com
     e-mail:         adamuy@intercellular-ng.com
     nic-hdl:        YA95-RIPE
     source:         RIPE # Filtered

Dr. Jan Misianik

Hello Friend,

I am Dr. Jan Misianik. and I represent Mr. Mikhail Khordokovsky the
former C.E.O of Yukos Oil Company in Russia. I have a very sensitive and
confidentialbrief from this top (oligarch) to ask for your partnership in
re-profiling funds US$42.3 Million. I will give the details, but in summary,
the funds are coming via Bank Menatep. This is a legitimate transaction.
You will be paid 10% for your "Management Fees".

If you are interested, please write back by ail:janmisianik@london.net
and provide me with your confidential telephone number,fax number and
email address and I will provide further details and instructions. Please
keep this confidential; we can't afford more political problems.

Finally, please note that this must be concluded within two weeks.Please
write back promptly.Write me back. I look forward to it.

Regards,
Dr. Jan Misianik.

Message headers:

Received: from [196.25.253.14] (account bobvaye1@webmail.co.za)
  by cgp6.sentechsa.net (CommuniGate Pro WebUser 4.3.5)
  with HTTP id 1480541; Wed, 06 Jul 2005 09:26:05 +0200
From: "bob vaye" <bobvaye1@webmail.co.za>
Subject:mutual business proposal
To: bobvaye1@webmail.co.za

Are you sick of spam too? Do you want it stopped now? Try jwSpamSpy, the spamfilter we use to track the spammers! Free 30-day trial version available now!