An
Email with the Subject "Fwd: ,,PAYMENT update USD 10.5million ATM CARD," was
received in one of Scamdex's honeypot email accounts on Fri, 14 Nov 2008 17:40:08 -0800
and has been classified as a Generic Scam Email.
The sender shows as RICROE@aol.com.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
nigerialagosinheritance234-7023166 atm 5million presidentnext of kinbankcreditmicrosoftwinaccountresidentcourierpaymentswiftfundurgentsentmailbank usd the bank paying bank userricroe@aol.comcenter17@yahoo.clcenter17@yahoo.clreplydieyahoo.boa(rly-mg05.mail.aol.com [1...(v121_r4.4)(mail10.syd.optusnet.com....([82.128.27.67])(authenticated sender the...(8.13.1/8.13.1)(resolutionpanel on contr...
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => scams@scamdex.com
[delivery-date:] => Fri, 14 Nov 2008 17:40:08 -0800
[received:] => Array
(
[0] => from imo-d04.mx.aol.com ([205.188.157.36])by gogol.o7e.net with esmtp (Exim 4.69)(envelope-from )id 1L1A8s-0001ly-Frfor scams@scamdex.com; Fri, 14 Nov 2008 17:40:08 -0800
[1] => from RICROE@aol.comby imo-d04.mx.aol.com (mail_out_v39.1.) id f.bc8.4180b506 (41812);Fri, 14 Nov 2008 20:40:04 -0500 (EST)
)
[from:] => RICROE@aol.com
[x-mailer:] => Array
(
[0] =>
[1] => AOL 9.1 sub 5000
)
[date:] => Fri, 14 Nov 2008 20:40:04 EST
[subject:] => Fwd: ,,PAYMENT update USD 10.5million ATM CARD,
[to:] => reportphishing@antiphishing.org, enforcement@sec.gov, phishing-report@us-cert.gov, scams@scamdex.com, pirt@castlecops.com
[mime-version:] => 1.0
[content-type:] => multipart/alternative; boundary="-----------------------------1226713204"
[x-spam-flag:] => Array
(
[0] => NO
[1] => NO
)
[x-spam-status:] => No, score=-2.8
[x-spam-score:] => -27
[x-spam-bar:] => --
[message-id:] => REIDs3x1239839810.M539437P32690V-S3X
[x-scamdex-scores:] => S:93 P:75 A:81 L:85 E:83 G:74
[x-scamdex-classtype:] => S
[x-scamdex-classscore:] => 93
[x-scamdex-totscore:] => 491
[x-scamdex-kw:] => kin ,000.000,account,bank,beneficiary,card,contact,courier,credit,die,foreign,fund,inc.,lagos,million,national,nigeria,payment,plc,report,resident,response,sent,urgent
[x-scamdex-em:] => RICROE@aol.com,_themotta@optusnet.com.au,afribanknig@ymail.com,afribknig@sify.com,afribknig@sify.comS,center17@yahoo.cl,center17@yahoo.clRe,enforcement@sec.gov,mAF1ZDq5024545@mail10.syd.optu,phishing-report@us-cert.gov,pirt@castlecops.com,reportphishing@antiphishing.org,themotta@optusnet.com.au
[x-scamdex-dir:] => B
[x-scamdex-id:] => B1239839810.M539437P32690V
[x-scamdex-copyright:] => This Email is Copyright Scamdex.com 2009, Reproduction Prohibited
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Return-Path: <atm.center17@yahoo.cl> Received:
from rly-mg05.mx.aol.com (rly-mg05.mail.aol.com [172.20.83.111]) by
air-mg07.mail.aol.com (v121_r4.4) with ESMTP id MAILINMG072-a0f491e27f9bb; Fri,
14 Nov 2008 20:38:15 -0500 Received: from mail10.syd.optusnet.com.au
(mail10.syd.optusnet.com.au [211.29.132.191]) by rly-mg05.mx.aol.com (v121_r4.4)
with ESMTP id MAILRELAYINMG051-a0f491e27f9bb; Fri, 14 Nov 2008 20:38:03
-0500 Received: from User ([82.128.27.67]) (authenticated sender themotta@optusnet.com.au) by
mail10.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP id
mAF1ZDq5024545; Sat, 15 Nov 2008 12:35:32 +1100 Message-Id: <200811150135.mAF1ZDq5024545@mail10.syd.optusnet.com.au> Reply-To:
<afribknig@sify.com> From:
"OFFICE OF THE SENATE"<atm.center17@yahoo.cl> Subject:
,,PAYMENT update USD 10.5million ATM CARD, Date: Sat, 15 Nov 2008 02:37:45
+0100 MIME-Version: 1.0 Content-Type:
text/html; charset="Windows-1251" Content-Transfer-Encoding:
7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft
Outlook Express 6.00.2800.1081 X-MimeOLE: Produced By Microsoft MimeOLE
V6.00.2800.1081 X-AOL-IP:
211.29.132.191 X-AOL-SCOLL-SCORE:0:2:267105376:93952408 X-AOL-SCOLL-URL_COUNT:0
Return-Path: <atm.center17@yahoo.cl> Received:
from rly-mg05.mx.aol.com (rly-mg05.mail.aol.com [172.20.83.111]) by
air-mg07.mail.aol.com (v121_r4.4) with ESMTP id MAILINMG072-a0f491e27f9bb; Fri,
14 Nov 2008 20:38:15 -0500 Received: from mail10.syd.optusnet.com.au
(mail10.syd.optusnet.com.au [211.29.132.191]) by rly-mg05.mx.aol.com (v121_r4.4)
with ESMTP id MAILRELAYINMG051-a0f491e27f9bb; Fri, 14 Nov 2008 20:38:03
-0500 Received: from User ([82.128.27.67]) (authenticated sender themotta@optusnet.com.au) by
mail10.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP id
mAF1ZDq5024545; Sat, 15 Nov 2008 12:35:32 +1100 Message-Id: <200811150135.mAF1ZDq5024545@mail10.syd.optusnet.com.au> Reply-To:
<afribknig@sify.com> From:
"OFFICE OF THE SENATE"<atm.center17@yahoo.cl> Subject:
,,PAYMENT update USD 10.5million ATM CARD, Date: Sat, 15 Nov 2008 02:37:45
+0100 MIME-Version: 1.0 Content-Type:
text/html; charset="Windows-1251" Content-Transfer-Encoding:
7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft
Outlook Express 6.00.2800.1081 X-MimeOLE: Produced By Microsoft MimeOLE
V6.00.2800.1081 X-AOL-IP:
211.29.132.191 X-AOL-SCOLL-SCORE:0:2:267105376:93952408 X-AOL-SCOLL-URL_COUNT:0
From: atm.center17@yahoo.cl Reply-to: afribknig@sify.com Sent:
11/14/2008 8:38:17 P.M. Eastern Standard Time Subj: ,,PAYMENT update USD
10.5million ATM CARD,
OFFICE OF THE SENATE
HOUSE FEDERAL REPUBLIC OF NIGERIA COMMITTEE ON FOREIGN
PAYMENT (RESOLUTIONPANEL ON CONTRACT PAYMENT) IKOYI-LAGOS
NIGERIA
FILE CODE #:
ATM/LAG/NG
ATTN:
BENEFICIARY,
Going by series of
petition received from International Body on the way your inheritance fund was
handled by our correspondence office .After Extinctive close door meeting with
Board of Directors and other Stake holders in the Government, Subcommittees of
the House Of Assembly and the House of Rep , Federal Republic of Nigeria. It
was Resolved and Agreed upon that your Heritance Fund would be released on a
special method payment , which tag Name Reads SWIFT CREDIT CARD, This method
of payment is designed by the Government to avert fraud perpetration or
stoppage of fund by Some Agencies. Either Through Anti Terrorist Certificate
or other certificates.
This Swift Credit
Card would be issued to you upon meeting with the Bank Requirement. This
office, has Been Mandated to take charge of the Issuance of the ATM SWIFT CARD
And that your inheritance payment file should be passed to my desk for
clarification .Upon Certification that your file is ok.This Office would
Direct you on how to receive your over Due inheritance fund via ATM SWIFT CARD
.The ATM CARD would be delivered to you via Courier. In the light of this
aforementioned, You are required to furnish the following information. To the
Paying Bank Afribank Plc Dr JEMAS KALU on this email :afribanknig@ymail.com
Diect Tel: +234-7023166367
1) Your Full Name......................
(2) Address where you want the payment centre to send your ATM
CARD.................
(3) Phone And Fax
Number...................
Your Next of Kin
Name and your date of Birth. Your telephone number and fax This Information's
would be used in opening of an account here .It's from here that the ATM would
be used in issuance of The ATM SWIFT CARD in your favour with the Atm Card
Number and all your information inserted into the card. Upon completion of
this issuance of the Atm Card ,It would be send to you via Courier to your
residential Address. Urgently furnish this office with your Contact
information in order to reconfirm if it's in line with the one contained in
our payment data. Be informed that your fund has been called back and it's now
in a suspense Account here in Our Bank. A new Account has to be opened in your
Name Before The Swift Credit Card is issued. Waiting for an urgent
response.
Yours
Faithfully
Senator David Mark
(New Senate President Federal Republic OF Nigeria
)
Get the Moviefone Toolbar. Showtimes, theaters, movie news & more!