An
Email with the Subject "YOUR STOLEN FUND RECOVERED:" was
received in one of Scamdex's honeypot email accounts on Mon, 08 Mar 2010 08:53:41 -0800
and has been classified as a Advance Fee Fraud/419 Scam Email.
The sender shows as "AFRICAN UNION FUND RECOVERY" <afriunrecovery@london.org>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
nigeriabeneficiaryafricanafrica5million trunkboxbanknationalsafeaccountclaimfive millioncourierserviceprocessfund transferinvestigationdeliverymaildivertedbank diplomaeurodollarusd the bank nwith bank respectnwill will securityboxes(my office)(usd5, 000,000.00)(usd5m)(director of int'l affairs)consignmentfinancial
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] =>
[envelope-to:] => 419@scamdex.com
[delivery-date:] => Mon, 08 Mar 2010 08:53:41 -0800
[received:] => Array
(
[0] => from mail.odhag.org.gt ([200.12.51.168])by fire.newsblaze.com with esmtp (Exim 4.69)(envelope-from )id 1NogD6-0002vb-Iffor 419@scamdex.com; Mon, 08 Mar 2010 08:53:41 -0800
[1] => from localhost (localhost.localdomain [127.0.0.1])by mail.odhag.org.gt (Postfix) with ESMTP id 929E25C71B8;Mon, 8 Mar 2010 08:21:43 -0600 (CST)
[2] => from mail.odhag.org.gt ([127.0.0.1])by localhost (mail.odhag.org.gt [127.0.0.1]) (amavisd-new, port 10024)with ESMTP id Qe2zpFaLK8xK; Mon, 8 Mar 2010 08:21:41 -0600 (CST)
[3] => from localhost (localhost.localdomain [127.0.0.1])by mail.odhag.org.gt (Postfix) with ESMTP id B470D5C71B2;Mon, 8 Mar 2010 08:21:41 -0600 (CST)
[4] => by mail.odhag.org.gt (Postfix, from userid 101)id D59395C71B1; Mon, 8 Mar 2010 08:21:40 -0600 (CST)
[5] => from 41-184-32-77.rv.ipnxtelecoms.com(41-184-32-77.rv.ipnxtelecoms.com [41.184.32.77]) by www.odhag.org.gt(Horde Framework) with HTTP; Mon, 08 Mar 2010 08:21:39 -0600
)
[x-virus-scanned:] => amavisd-new at odhag.org.gt
[message-id:] => <20100308082139.13824kvy9g9w4oao@www.odhag.org.gt>
[date:] => Mon, 08 Mar 2010 08:21:39 -0600
[from:] => "AFRICAN UNION FUND RECOVERY"
[reply-to:] => afriunrecovery1@gmail.com
[to:] => undisclosed-recipients:;
[subject:] => YOUR STOLEN FUND RECOVERED:
[mime-version:] => 1.0
[content-type:] => text/plain;charset=ISO-8859-1;DelSp="Yes";format="flowed"
[content-disposition:] => inline
[content-transfer-encoding:] => quoted-printable
[user-agent:] => Internet Messaging Program (IMP) 4.2.2
[x-spam-status:] => No, score=-14.9
[x-spam-score:] => -148
[x-spam-bar:] => --------------
[x-spam-flag:] => NO
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
AFRICAN UNION RECOVERY,
DEPARTMENT OF INT'L AFFAIRS
1 Horse Guards Road,London,SW1A 2HQ.
Respected Beneficiary,
Recovery office in London, Britain.Recently, the British government
of money that are trapped and left unclaimed in Most African Banks and
External Affairs department (My Office) was mandated by the British
belonging to United States, European, Asian and Australian
Nationals that are trapped in African Banks and finance houses.
On our investigation in Nigeria, we discovered a file NO;
234/98GT/UB/OT22/01 with the total sum of Five Million US Dollars
(USD5, 000,000.00) with your name as the Beneficiary. It was further
Discovered that some unknown officials of the Bank have fraudulently
leaving only USD5Million in the account.
it Without any waste of time while we further continue our
diverting some part of the funds.Because of the problems associated
will be delivered to the Beneficiaries in cash to avoid the issues of
packed and sealed all the recovered funds in Galvanized Trunk boxes
will handle the delivery of the trunks to your area of destination.
safety purposes. Though, for security reasons, we will want neither
boxes.With this arrangement, you will receive your fund under a
requirements.We will request you to reconfirm your FULL NAMES, ADDRESS
the delivery.
Thanks,
Mr.Robert Scott.
Email:afriunrecovery@london.com
(Director of Int'l Affairs)
AFRICAN UNION RECOVERY.
AFRICAN UNION RECOVERY,
DEPARTMENT OF INT'L AFFAIRS
1 Horse Guards Road,London,SW1A 2HQ.
Respected Beneficiary,
I am the Director of International Affairs in the African Union
Recovery office in London, Britain.Recently, the British government
has received series of complaints regarding the Existence of huge sums
of money that are trapped and left unclaimed in Most African Banks and
Financial organizations, especially in Nigeria.The African Union
External Affairs department (My Office) was mandated by the British
government to go to Africa to investigate and recover all Funds
belonging to United States, European, Asian and Australian
Nationals that are trapped in African Banks and finance houses.
On our investigation in Nigeria, we discovered a file NO;
234/98GT/UB/OT22/01 with the total sum of Five Million US Dollars
(USD5, 000,000.00) with your name as the Beneficiary. It was further
Discovered that some unknown officials of the Bank have fraudulently
Diverted some part of your total sum to unknown accounts in the past
leaving only USD5Million in the account.
My office has recovered this amount (USD5M) and we want you to receive
it Without any waste of time while we further continue our
investigation to get those fraudulent officials who were involved in
diverting some part of the funds.Because of the problems associated
with Bank wire transfers, we have Decided that all the recovered funds
will be delivered to the Beneficiaries in cash to avoid the issues of
fund transfer requirements. Under this arrange, we have secretly
packed and sealed all the recovered funds in Galvanized Trunk boxes
and we shall engage the services of a Diplomatic Courier Firm that
will handle the delivery of the trunks to your area of destination.
The Courier Firm uses Diplomats to deliver vital consignments for
safety purposes. Though, for security reasons, we will want neither
the courier company nor the Diplomat to know the content of the trunk
boxes.With this arrangement, you will receive your fund under a
hitch-free claim process as you will not be subjected to Bank
requirements.We will request you to reconfirm your FULL NAMES, ADDRESS
AND PHONE NUMBERS to us and then we shall give you further details on
the delivery.
Thanks,
Mr.Robert Scott.
Email:afriunrecovery@london.com
(Director of Int'l Affairs)
AFRICAN UNION RECOVERY.