Nigerian Scam - Example 002

Please be sure to read my Nigerian Scams Home Page

NOTE: This page Under Construction/Conversion
This page has not been completely converted to OFPv2 Standards.
When this is completed, this paragraph will go away.
Meanwhile, all external links on this page open a new window.

Things I Did, Below

I, personally, receive email in HTML format. The following was received (and looks) like I received it.

I removed my email addresses. These came to various accounts and some no longer exist. There are places on this site you can get hold of me if you wish or need to. They are protected from spambots using JavaScript, but all you have to do is click on them.
All scammer and related email addresses, and any actual website links have been changed, at least putting spaces into them. They appear as underlined blue links, though they aren't.
Any notes I added in the actual letter are in square brackets ("[" "]"), are bold, red in color, and highlighted. If what I found "behind the links" (email or website) are different than what was displayed, I will include them in this type of note.
All spelling, spacing, line-wrapping, and punctuation errors are the ones that appeared in the original received email. (I may or may not analyze some or all of these.)

Scam Example
Received 08/18/2006 - TWO copies, one timed at 8:06AM and one at 8:17AM

From: promiseugo2 @ katamail.com [DO NOT EMAIL THIS ADDRESS (see below)]
To: <blank> [The TO was blank, indicating a mailing list, to me]
Sent: Friday, August 18, 2006 8:04 AM [AND at 8:16 AM]
Subject: Compliments

Dearest,

Compliments of the Season and God's blessings. I am glad to inform you that I have successfully concluded the transaction; the money has been transferred to London. It was done through the assistant of Mr.Howard Ferraro who is a London base business man.

Currently I am in London with him and my wife andchildren.However, I did not forget you because you are the source of my success; you made me what I am now though you are not there to complete this project with me but I gave all the credit and thanks to you. I know it is not your fault or rather your wish to back off on me and the transaction, I understand it was simply because of what you must have heard about my country and her business opportunities.

Actually there are still good ones for example myself. In appreciate of your assistance I have mapped out as a compensation and wrote on your favor a certified bank draft worth of US$775,000.00.(Seven Hundred and Seventy Five Thousand, United States Dollar Only) I left the draft with my assistance Mike Obi on my departure to London.

I would like you therefore, to contact him on the below info and instruct him where to send the draft to you because I have instructed him on that already.

Attn: Mike Obi
Email: (mike.obi @ katamail.com) [DO NOT EMAIL THIS ADDRESS (see below)]

I would have love to call you from London where I currently reside but due to the recent terrorist attack Mr. Ferraro advice me not to call because all international calls are been monitored by the UK authority. Feel free to contact my secretary so that he can release your bank draft to you. I will stop here. Once again, thank you very much and remain blessed.

Regards,
Mr. Promise Ugo.

________________________________________________________________________
SERVIZIO VOICE: TELEFONA e INVIA SMS dal tuo computer a tariffe vantaggiose!
Scopri come telefonare e videochiamare gratis da pc a pc.
http:// voice. repubblica.it

[NOTE: I left names, email addresses, and phone numbers in here for the search engines to find. DO NOT TRY TO CONTACT THEM! I'm SURE you will be ripped off! -LE]

Email Headers

[DO NOT send email to any of the following email addresses]

I received TWO copies of the above email, on the same day and within 11 minutes of each other. Both went to the same address, both sent by the same person. The only differences I see in the headers, below, seem to have more to do with the time and message id (which SHOULD be different for each email). The differences between the two I see are marked in red.

Now, whether this means my email address is listed twice in a large database (which is possible), is listed in TWO different databases (also possible), or the idiot emailer is typing in names and they didn't sort them first to drop duplicates (also possible), I have no clue.

I hope the "peon" they pay to send these emails doesn't get beat, but his/her SUPERVISOR does!

Received 08/18/2006 at 08:06AM

X-Message-Status: n:0
X-SID-PRA: promiseugo2 @ katamail.com <promiseugo2 @ katamail.com>
X-SID-Result: TempError
X-Message-Info: LsUYwwHHNt3388UwD+l3uyQm5igR+n17Gl7ZUcJfpEo=
Received: from fe-7a.inet.it ([213.92.5.113]) by bay0-mc9-f9.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Fri, 18 Aug 2006 06:06:27 -0700
Received: from ::ffff:80.78.18.219 ([::ffff:80.78.18.219]) by fe-7a.inet.it via I-SMTP-5.4.4-546
id ::ffff:80.78.18.219+xpxOgRlWt8Eh; Fri, 18 Aug 2006 15:04:45 +0200
From: "promiseugo2 @ katamail.com" <promiseugo2 @ katamail.com
X-wmSenderIP: 80.78.18.219
Message-ID: <80.78.18.219.608844778.1155906284 @ webmail.katamail.com>
X-Complaints-To: abuse @ katamail.com
Reply-To: mike.obi @ katamail.com
Subject: Compliments
Date: Fri, 18 Aug 2006 13:04:44 +0000
X-Mailer: Katamail
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Message-ID: <20060818130445.155605 @ ::ffff:80.78.18.219>
Bcc:
Return-Path: promiseugo2 @ katamail.com
X-OriginalArrivalTime: 18 Aug 2006 13:06:27.0610 (UTC) FILETIME=[1D83DFA0:01C6C2C7]

Received 08/18/2006 at 08:17AM

X-Message-Status: n:0
X-SID-PRA: promiseugo2 @ katamail.com <promiseugo2 @ katamail.com>
X-SID-Result: TempError
X-Message-Info: LsUYwwHHNt3P8PlaxPQzPMFUT1nOTcvOVruG/EG2QQ8=
Received: from fe-7c.inet.it ([213.92.5.114]) by bay0-mc1-f1.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Fri, 18 Aug 2006 06:17:55 -0700
Received: from ::ffff:80.78.18.219 ([::ffff:80.78.18.219]) by fe-7c.inet.it via I-SMTP-5.4.4-546
id ::ffff:80.78.18.219+ydK7KOAfoJuC; Fri, 18 Aug 2006 15:16:35 +0200
From: "promiseugo2 @ katamail.com" <promiseugo2 @ katamail.com>
X-wmSenderIP: 80.78.18.219
Message-ID: <80.78.18.219.2052554039.1155906995 @ webmail.katamail.com>
X-Complaints-To: abuse @ katamail.com
Reply-To: mike.obi @ katamail.com
Subject: Compliments
Date: Fri, 18 Aug 2006 13:16:35 +0000
X-Mailer: Katamail
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
Message-ID: <20060818131635.997580 @ ::ffff:80.78.18.219>
Bcc:
Return-Path: promiseugo2 @ katamail.com
X-OriginalArrivalTime: 18 Aug 2006 13:17:55.0677 (UTC) FILETIME=[B7A290D0:01C6C2C8]

Notes

Problems I see:

Obvious (to me, anyway) errors:
- THIS one

Return to OFPv2/SSFF - Scams - Nigerian Scam Home page

Send email to Bill Sanders ()
with questions or comments about this page or site.

This site, all text and graphics (unless otherwise noted) on it
were designed, developed and published by Bill Sanders of Orange Frog Productions.
It and it's CSS was validated and complies with both the: CSS and HTML 4.01 validators from W3C.
NOTE: All CSS validates except the "New Window Buttons" - Their CSS includes some invalid code (ie: hacks)
and warnings for using transparent backgrounds when color foregrounds defined.
Copyright © 2003, 2004, 2005, 2006 by Bill Sanders / Full site last modified: July 10, 2006