An
Email with the Subject "FW: FINANCIAL SECTOR SURVEILLANCE" was
received in one of Scamdex's honeypot email accounts on Mon, 28 Apr 2008 05:00:42 -0700
and has been classified as a Generic Scam Email.
The sender shows as "stefanytomalinbeads@compuserve.com" <stefanytomalinbeads@compuserve.com>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
beneficiaryinheritance atm natm thousand united states dboxchieflockedcontactdrawwinpaymentswiftfundlegalsecuremailbank userrespecteric_johnm9@yahoo.co3drev_atiku_benllo252@yah...@yahoo.comrev_atiku_benllo252@yahoo. will yahoo.coyahoo.comyahoomyahoo.ach(8.13.6/8.13.4/g1.2)(qmail 23689 invoked by u...[41.210.13.114](ist)(gcfr)($20,000.00)(p.o=20box=20not=20accept...(0,=2096,=20191)(p.o box not acceptable)(0, 96, 191)http://in.rd.yahoo.com/ta...http://in.messenger.yahoo...http://in.mc78.mail.yahoo...http://in.rd.yahoo.com/ta...http://link.myhosting.com...financial financial
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Sender: eric_johnm9@yahoo.co.in
Received: from web7801.mail.in.yahoo.com (web7801.mail.in.yahoo.com
[202.86.4.58])
by liaag2ae.mx.compuserve.com (8.13.6/8.13.4/g1.2) with SMTP id
m3SAr4OH005992
for <StefanyTomalinBeads@compuserve.com>; Mon, 28 Apr 2008 06:53:05 -0400
Received: (qmail 23689 invoked by uid 60001); 28 Apr 2008 10:53:04 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.co.in;
h=X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version
:Content-Type:Content-Transfer-Encoding:Message-ID;
b=6O8vum+nz90fb95g+LaCvOG2x3D845vTx6haXQn+K3U8RH7chMRkXS4gJ45vFixKXcgglD3C
d5QEzjdgpQVe234MvLnGbr0yhyaeTs1Qc6TfkBhKsK5AyBA8q97ZTKOI9w2Ezy9+OR7OHLOngjxd
/Lq+ll+IXAlViWQMpm7OuVQ=;
X-YMail-OSG:
2ISNWAIVM1mtMT21urKwrDTnZLEuqNQLrAjEEKiEi38BtRSPCbVc3eZI.QFfTdwPSCRFAjgw4T5N
r1fI..9qLd4T_gp4tzlWquMI4.VD2S7sHnJZZ5P2K1yiOfCvda7Aygi0OqWgS3N.x8m_DU_dz5yr
T4y9
Received: from [41.210.13.114] by web7801.mail.in.yahoo.com via HTTP; Mon,
28 Apr 2008 16:23:03 IST
X-Mailer: YahooMailWebService/0.7.185
Date: Mon, 28 Apr 2008 16:23:03 +0530 (IST)
From: ERIC JOHN <eric_johnm9@yahoo.co.in>
Reply-To: eric_johnm9@yahoo.co.in
Subject: FINANCIAL SECTOR SURVEILLANCE
To: eric_johnm9@yahoo.co.uk
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Message-ID: <80959.23533.qm@web7801.mail.in.yahoo.com>
X-Virus-Scanned: ClamAV version 0.92.1, clamav-milter version 0.92.1 on
liaag2ae.mx.compuserve.com
X-Virus-Status: Clean
<table=20cellspacing=3D'0'=20cellpadding=3D'0'=20border=3D'0'=20><tr><td=20=
style=3D'font:=20inherit;'><div=20id=3D"yiv1766563828"><strong>BANK =20
=
OF=20GHANA=20<br>NEW=20TOWN =20<br>ACCRA=20GHANA,<br>OFFICE=20OF=20THE=
=20DEPUTY=20GOVERNOR<br>FINANCIAL=20SECTOR=20SURVEILLANCE.</strong>=20=20<d=
iv><br><strong>From=20the=20desk=20of:<br>DR.ERIC=20JOHN=20<br><br>Attentio=
n:=20beneficiary<br><br>This=20is=20to=20officially=20inform=20you=20that=20
=
we=20have=20verified=20your=20contract=20/inheritance=20file=20and=20found=2
0=
out=20that=20why=20you=20have=20not=20received=20your =20payment=20is=2
0=
because=20you=20have=20not=20fulfilled=20the=20obligations=20given=20to=20y=
ou=20in=20respect=20of=20your=20contract/inheritance=20payment.Secondly=20w=
e=20have=20been=20informed=20that=20you=20are=20still=20dealing=20with=20th=
e=20none=20officials=20in=20the=20bank=20all=20your=20attempt=20to=20secure=
=20the=20release=20of=20the=20fund=20to=20you.=20We=20wish=20to=20advise=20=
you=20that=20such=20an=20illegal=20act=20like=20this=20have=20to=20stop=20i=
f=20you=20wish=20to=20<br>receive=20your=20payment=20since=20we=20have=20de=
cided=20to=20bring=20a=20solution=20to=20your
=20<br>problem.<br><br> Right=20now=20we=20have=20arranged=20your=20pa=
yment=20through=20our=20SWIFT=20CARD=20<br>PAYMENT=20CENTER=20from=20Asia=20
=
Pacific,=20that=20is=20the=20latest=20instruction=20from=20Mr.=20<br>Presid=
ent,=20Chief=20AHAHAD =20Muse=20Yaruadua (GCFR)=20Republic=20of=20
=
GHANA.<br><br>This=20card=20center=20will=20send=20you=20an=20ATM=20card=20=
which=20you=20will=20use=20to=20withdraw=20your=20money=20in=20any=20ATM=20=
machine=20in=20any=20part=20of=20the=20world,=20but=20the=20maximum=20is=20=
Twenty=20Thousand=20United=20States=20dolars($20,000.00)=20per=20day.=20So=2
0=
if=20you=20like=20to=20receive=20your=20fund=20in=20this=20way,<br><br>&nbs=
p;please=20let=20us=20know=20by=20contacting=20the=20ATM=20payment=20depart=
ment=20and=20also=20send=20the=20following=20information=20as=20listed=20be=
low:</strong></div>=20=20<div><strong><br>1.=20Full=20name.................=
.............<br>2.=20Phone=20and=20fax=20number.......................<br>=
3.=20Address=20were=20you=20want=20them=20to=20send=20the=20ATM=20card=20to=
..................<br> (p.o=20box=20not=20acceptable)<br>4.=20Your=20a=
ge=20and=20current=20occupation.......................<br><br>kindly=20find=
=20below=20the
=20contact=20person:<br> Director,=20ATM=20payment=20department=20<br>=
email;=20<span=20style=3D"color:=20rgb(0,=2096,=20191);=20text-decoration:=2
0=
underline;=20font-weight:=20bold;">earlymanco</span><a=20rel=3D"nofollow"=20
=
style=3D"font-weight:=20bold;"=20target=3D"_blank"=20href=3D"http://in.mc78=
.mail.yahoo.com/mc/compose?to=3Drev_atiku_benllo252@yahoo.com">@yahoo.com</=
a><br><br>Thanks<br>Mr=20Eric=20John<br><br><br></strong></div></div></td><=
/tr></table><br>
=20=20=20=20=20=20<!--6--><hr=20size=3D1></hr>=20Messenger=20blocked?=20Wan=
t=20to=20chat?=20<a=20href=3D"http://in.rd.yahoo.com/tagline_webmessenger_6=
/*http://in.messenger.yahoo.com/webmessengerpromo.php">Here=20is=20the=20so=
lution.</a>
-----------------
From: ERIC JOHN eric_johnm9@yahoo.co.in
Date: Mon, 28 Apr 2008 16:23:03 +0530 (IST)
To: eric_johnm9@yahoo.co.uk
Subject: FINANCIAL SECTOR SURVEILLANCE
<table cellspacing='0' cellpadding='0' border='0' ><tr><td style='font:
inherit;'><div id="yiv1766563828"><strong>BANK OF GHANA <br>NEW TOWN
<br>ACCRA GHANA,<br>OFFICE OF THE DEPUTY GOVERNOR<br>FINANCIAL SECTOR
SURVEILLANCE.</strong> <div><br><strong>From the desk of:<br>DR.ERIC JOHN
<br><br>Attention: beneficiary<br><br>This is to officially inform you that
we have verified your contract /inheritance file and found out that why you
have not received your payment is because you have not fulfilled the
obligations given to you in respect of your contract/inheritance
payment.Secondly we have been informed that you are still dealing with the
none officials in the bank all your attempt to secure the release of the
fund to you. We wish to advise you that such an illegal act like this have
to stop if you wish to <br>receive your payment since we have decided to
bring a solution to your
<br>problem.<br><br> Right now we have arranged your payment through our
SWIFT CARD <br>PAYMENT CENTER from Asia Pacific, that is the latest
instruction from Mr. <br>President, Chief AHAHAD Muse Yaruadua (GCFR)
Republic of GHANA.<br><br>This card center will send you an ATM card which
you will use to withdraw your money in any ATM machine in any part of the
world, but the maximum is Twenty Thousand United States dolars($20,000.00)
per day. So if you like to receive your fund in this way,<br><br> please
let us know by contacting the ATM payment department and also send the
following information as listed below:</strong></div> <div><strong><br>1.
Full name..............................<br>2. Phone and fax
number.......................<br>3. Address were you want them to send the
ATM card to..................<br> (p.o box not acceptable)<br>4. Your age
and current occupation.......................<br><br>kindly find below the
contact person:<br> Director, ATM payment department <br>email; <span
style="color: rgb(0, 96, 191); text-decoration: underline; font-weight:
bold;">earlymanco</span><a rel="nofollow" style="font-weight: bold;"
target="_blank"
href="http://in.mc78.mail.yahoo.com/mc/compose?to=rev_atiku_benllo252@yahoo.
com">@yahoo.com</a><br><br>Thanks<br>Mr Eric
John<br><br><br></strong></div></div></td></tr></table><br>
<!--6--><hr size=1></hr> Messenger blocked? Want to chat? <a
href="http://in.rd.yahoo.com/tagline_webmessenger_6/*http://in.messenger.yah
oo.com/webmessengerpromo.php">Here is the solution.</a>
--------------------------------------------------------------------
myhosting.com - Premium Microsoft® Windows® and Linux web and application
hosting - http://link.myhosting.com/myhosting
Sender: eric_johnm9@yahoo.co.in
Received: from web7801.mail.in.yahoo.com (web7801.mail.in.yahoo.com
[202.86.4.58])
by liaag2ae.mx.compuserve.com (8.13.6/8.13.4/g1.2) with SMTP id
m3SAr4OH005992
for <StefanyTomalinBeads@compuserve.com>; Mon, 28 Apr 2008 06:53:05 -0400
Received: (qmail 23689 invoked by uid 60001); 28 Apr 2008 10:53:04 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.co.in;
h=X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version
:Content-Type:Content-Transfer-Encoding:Message-ID;
b=6O8vum+nz90fb95g+LaCvOG2x3D845vTx6haXQn+K3U8RH7chMRkXS4gJ45vFixKXcgglD3C
d5QEzjdgpQVe234MvLnGbr0yhyaeTs1Qc6TfkBhKsK5AyBA8q97ZTKOI9w2Ezy9+OR7OHLOngjxd
/Lq+ll+IXAlViWQMpm7OuVQ=;
X-YMail-OSG:
2ISNWAIVM1mtMT21urKwrDTnZLEuqNQLrAjEEKiEi38BtRSPCbVc3eZI.QFfTdwPSCRFAjgw4T5N
r1fI..9qLd4T_gp4tzlWquMI4.VD2S7sHnJZZ5P2K1yiOfCvda7Aygi0OqWgS3N.x8m_DU_dz5yr
T4y9
Received: from [41.210.13.114] by web7801.mail.in.yahoo.com via HTTP; Mon,
28 Apr 2008 16:23:03 IST
X-Mailer: YahooMailWebService/0.7.185
Date: Mon, 28 Apr 2008 16:23:03 +0530 (IST)
From: ERIC JOHN <eric_johnm9@yahoo.co.in>
Reply-To: eric_johnm9@yahoo.co.in
Subject: FINANCIAL SECTOR SURVEILLANCE
To: eric_johnm9@yahoo.co.uk
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Message-ID: <80959.23533.qm@web7801.mail.in.yahoo.com>
X-Virus-Scanned: ClamAV version 0.92.1, clamav-milter version 0.92.1 on
liaag2ae.mx.compuserve.com
X-Virus-Status: Clean
<table=20cellspacing=3D'0'=20cellpadding=3D'0'=20border=3D'0'=20><tr><td=20=
style=3D'font:=20inherit;'><div=20id=3D"yiv1766563828"><strong>BANK =20
=
OF=20GHANA=20<br>NEW=20TOWN =20<br>ACCRA=20GHANA,<br>OFFICE=20OF=20THE=
=20DEPUTY=20GOVERNOR<br>FINANCIAL=20SECTOR=20SURVEILLANCE.</strong>=20=20<d=
iv><br><strong>From=20the=20desk=20of:<br>DR.ERIC=20JOHN=20<br><br>Attentio=
n:=20beneficiary<br><br>This=20is=20to=20officially=20inform=20you=20that=20
=
we=20have=20verified=20your=20contract=20/inheritance=20file=20and=20found=2
0=
out=20that=20why=20you=20have=20not=20received=20your =20payment=20is=2
0=
because=20you=20have=20not=20fulfilled=20the=20obligations=20given=20to=20y=
ou=20in=20respect=20of=20your=20contract/inheritance=20payment.Secondly=20w=
e=20have=20been=20informed=20that=20you=20are=20still=20dealing=20with=20th=
e=20none=20officials=20in=20the=20bank=20all=20your=20attempt=20to=20secure=
=20the=20release=20of=20the=20fund=20to=20you.=20We=20wish=20to=20advise=20=
you=20that=20such=20an=20illegal=20act=20like=20this=20have=20to=20stop=20i=
f=20you=20wish=20to=20<br>receive=20your=20payment=20since=20we=20have=20de=
cided=20to=20bring=20a=20solution=20to=20your
=20<br>problem.<br><br> Right=20now=20we=20have=20arranged=20your=20pa=
yment=20through=20our=20SWIFT=20CARD=20<br>PAYMENT=20CENTER=20from=20Asia=20
=
Pacific,=20that=20is=20the=20latest=20instruction=20from=20Mr.=20<br>Presid=
ent,=20Chief=20AHAHAD =20Muse=20Yaruadua (GCFR)=20Republic=20of=20
=
GHANA.<br><br>This=20card=20center=20will=20send=20you=20an=20ATM=20card=20=
which=20you=20will=20use=20to=20withdraw=20your=20money=20in=20any=20ATM=20=
machine=20in=20any=20part=20of=20the=20world,=20but=20the=20maximum=20is=20=
Twenty=20Thousand=20United=20States=20dolars($20,000.00)=20per=20day.=20So=2
0=
if=20you=20like=20to=20receive=20your=20fund=20in=20this=20way,<br><br>&nbs=
p;please=20let=20us=20know=20by=20contacting=20the=20ATM=20payment=20depart=
ment=20and=20also=20send=20the=20following=20information=20as=20listed=20be=
low:</strong></div>=20=20<div><strong><br>1.=20Full=20name.................=
.............<br>2.=20Phone=20and=20fax=20number.......................<br>=
3.=20Address=20were=20you=20want=20them=20to=20send=20the=20ATM=20card=20to=
..................<br> (p.o=20box=20not=20acceptable)<br>4.=20Your=20a=
ge=20and=20current=20occupation.......................<br><br>kindly=20find=
=20below=20the
=20contact=20person:<br> Director,=20ATM=20payment=20department=20<br>=
email;=20<span=20style=3D"color:=20rgb(0,=2096,=20191);=20text-decoration:=2
0=
underline;=20font-weight:=20bold;">earlymanco</span><a=20rel=3D"nofollow"=20
=
style=3D"font-weight:=20bold;"=20target=3D"_blank"=20href=3D"http://in.mc78=
.mail.yahoo.com/mc/compose?to=3Drev_atiku_benllo252@yahoo.com">@yahoo.com</=
a><br><br>Thanks<br>Mr=20Eric=20John<br><br><br></strong></div></div></td><=
/tr></table><br>
=20=20=20=20=20=20<!--6--><hr=20size=3D1></hr>=20Messenger=20blocked?=20Wan=
t=20to=20chat?=20<a=20href=3D"http://in.rd.yahoo.com/tagline_webmessenger_6=
/*http://in.messenger.yahoo.com/webmessengerpromo.php">Here=20is=20the=20so=
lution.</a>
-----------------
From: ERIC JOHN eric_johnm9@yahoo.co.in
Date: Mon, 28 Apr 2008 16:23:03 +0530 (IST)
To: eric_johnm9@yahoo.co.uk
Subject: FINANCIAL SECTOR SURVEILLANCE
<table cellspacing='0' cellpadding='0' border='0' ><tr><td style='font:
inherit;'><div id="yiv1766563828"><strong>BANK OF GHANA <br>NEW TOWN
<br>ACCRA GHANA,<br>OFFICE OF THE DEPUTY GOVERNOR<br>FINANCIAL SECTOR
SURVEILLANCE.</strong> <div><br><strong>From the desk of:<br>DR.ERIC JOHN
<br><br>Attention: beneficiary<br><br>This is to officially inform you that
we have verified your contract /inheritance file and found out that why you
have not received your payment is because you have not fulfilled the
obligations given to you in respect of your contract/inheritance
payment.Secondly we have been informed that you are still dealing with the
none officials in the bank all your attempt to secure the release of the
fund to you. We wish to advise you that such an illegal act like this have
to stop if you wish to <br>receive your payment since we have decided to
bring a solution to your
<br>problem.<br><br> Right now we have arranged your payment through our
SWIFT CARD <br>PAYMENT CENTER from Asia Pacific, that is the latest
instruction from Mr. <br>President, Chief AHAHAD Muse Yaruadua (GCFR)
Republic of GHANA.<br><br>This card center will send you an ATM card which
you will use to withdraw your money in any ATM machine in any part of the
world, but the maximum is Twenty Thousand United States dolars($20,000.00)
per day. So if you like to receive your fund in this way,<br><br> please
let us know by contacting the ATM payment department and also send the
following information as listed below:</strong></div> <div><strong><br>1.
Full name..............................<br>2. Phone and fax
number.......................<br>3. Address were you want them to send the
ATM card to..................<br> (p.o box not acceptable)<br>4. Your age
and current occupation.......................<br><br>kindly find below the
contact person:<br> Director, ATM payment department <br>email; <span
style="color: rgb(0, 96, 191); text-decoration: underline; font-weight:
bold;">earlymanco</span><a rel="nofollow" style="font-weight: bold;"
target="_blank"
href="http://in.mc78.mail.yahoo.com/mc/compose?to=rev_atiku_benllo252@yahoo.
com">@yahoo.com</a><br><br>Thanks<br>Mr Eric
John<br><br><br></strong></div></div></td></tr></table><br>
<!--6--><hr size=1></hr> Messenger blocked? Want to chat? <a
href="http://in.rd.yahoo.com/tagline_webmessenger_6/*http://in.messenger.yah
oo.com/webmessengerpromo.php">Here is the solution.</a>
--------------------------------------------------------------------
myhosting.com - Premium Microsoft® Windows® and Linux web and application
hosting - http://link.myhosting.com/myhosting