Nigerian Scam - December 26, 2007
Please be sure to read my Nigerian Scams Home Page
NOTE: All external links on this page open a new window.
Things I Did, Below
I, personally, receive email in HTML format. The following was received (and looked) like I received it. At the time, I was more interested in the message than the headers and do not have the original. This is a copy I forwarded to myself as I sent it to my father.
- I removed my email addresses. These came to various accounts and some no longer exist. There are places on this site you can get hold of me if you wish or need to. They are protected from spambots using JavaScript, but all you have to do is click on them.
- All scammer and related email addresses, and any actual website links have been changed, at least putting spaces into them. They appear as underlined blue links, though they aren't.
- Any notes I added in the actual letter are in square brackets ("[" "]"), are bold, red in color, and highlighted. If what I found "behind the links" (email or website) are different than what was displayed, I will include them in this type of note.
- All spelling, spacing, line-wrapping, and punctuation errors are the ones that appeared in the original received email. (I may or may not analyze some or all of these.)
Scam Example
Received 12/26/2007
I received six (6) copies of this one - One each at 03:40PM, 03:43PM, 03:45PM, 03:47PM, 03:51PM, and 03:57PM.
From: Adams Joseph
[<== Link behind the name:
To: [my email address]
Sent: Wednesday, December 26, 2007 10:02 AM
Subject: After waiting and no response was heard
Hello My Dear,
After waiting and no response was heard, I deposited and
also paid for the delivery fee of your $2.5,000 000.00
Million US Dollars,as consignment box to FEDERAL INLAND
SECURITY COMPANY in Lagos Nigeria because I travelled to
SAUDI ARABIA to visit my friend and i will not
come back till April,2008.
I want you to contact the FEDERAL INLAND SECURITY COMPANY to know when they will be delivering your consignment. I have paid for the delivery charges and also the insurance fee, the only fee you will pay them is the monthly dumorage fee which they would pay the security department that are guarding your consignment since the deposition day.
But if you will be very fast in contacting them,you will
be charged for only one month dumorage fee which will
cost only $270 USD. So i urge you to contact them as
soon as you receive this email.
CONTACT:Mr. Williams Bankole
MANAGER FEDERAL INLAND SECURITY COMPANY.
E-mail:
Try to contact them as soon as possible to avoid increase in dumorage fee. I gave them your delivery address but you have to reconfirm it to them again to avoid any mistakes in the delivery of your fund.
Reconfirm below information to the company.
Your Full Name-----------------------
Your Address-------------------------
Home Telephone-----------------------
Office Telephone---------------------
Finally indicate this code: GM0081 when contacting them,
it will identify that you are the owner of the
$2.500.000.00 consignment trunk box deposited in the
company. Do let me know as soon as you receive your
consignment and take a proper account of the content if
the content is
$2.500.000.00.
Regards,
Mr. Adams Joseph.
[NOTE: I left names, email addresses, and phone numbers in here for the search engines to find. DO NOT TRY TO CONTACT THEM! I'm SURE you will be ripped off! -LE]
Email Headers
Received 03:40PM
[DO NOT send email to any of the following email addresses]
X-Message-Delivery:
Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
X-Message-Status: n:0
X-SID-PRA: Adams Joseph <
X-Message-Info: 6sSXyD95QpUtbvzX1POAfQIy9rSTbifmJDvRZX
[space added]
osd1yuOcfi8L86aRdemBeO+vFt9M4fyu3LShxMuhXdxDCiMQ==
Received: from ns20689.ovh.net ([213.251.165.75]) by
bay0-mc6-f16.bay0.hotmail.com with Microsoft
SMTPSVC(6.0.3790.2668);
Wed, 26 Dec 2007 12:40:58 -0800
Received: (qmail 22646 invoked by uid 99);
26 Dec 2007 14:59:54 -0000
Date: 26 Dec 2007 14:59:54 -0000
Message-ID: <
To:
Subject: After waiting and no response was heard
From: Adams Joseph <
Reply-To:
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Return-Path:
X-OriginalArrivalTime: 26 Dec 2007 20:40:59.0003 (UTC)
FILETIME=[9F0274B0:01C847FF]
Received 03:43PM
[DO NOT send email to any of the following email addresses]
X-Message-Delivery:
Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
X-Message-Status: n:0
X-SID-PRA: Adams Joseph <
X-Message-Info: 6sSXyD95QpUtbvzX1POAfQIy9rSTbifmJDvRZX
[space added]
osd1yuOcfi8L86aRdemBeO+vFt9M4fyu3LShxMuhXdxDCiMQ==
Received: from ns20689.ovh.net ([213.251.165.75]) by
bay0-mc12-f12.bay0.hotmail.com with Microsoft
SMTPSVC(6.0.3790.2668);
Wed, 26 Dec 2007 12:43:29 -0800
Received: (qmail 6658 invoked by uid 99);
26 Dec 2007 15:00:21 -0000
Date: 26 Dec 2007 15:00:21 -0000
Message-ID: <
To:
Subject: After waiting and no response was heard
From: Adams Joseph <
Reply-To:
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Return-Path:
X-OriginalArrivalTime: 26 Dec 2007 20:43:29.0820 (UTC)
FILETIME=[F8E74DC0:01C847FF]
Received 03:45PM
[DO NOT send email to any of the following email addresses]
X-Message-Delivery:
Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
X-Message-Status: n:0
X-SID-PRA: Adams Joseph <
X-Message-Info: 6sSXyD95QpUtbvzX1POAfQIy9rSTbifmJDvRZX
[space added]
osd1yuOcfi8L86aRdemBeO+vFt9M4fyu3LShxMuhXdxDCiMQ==
Received: from ns20689.ovh.net ([213.251.165.75]) by
bay0-mc7-f15.bay0.hotmail.com with Microsoft
SMTPSVC(6.0.3790.2668);
Wed, 26 Dec 2007 12:45:14 -0800
Received: (qmail 28481 invoked by uid 99);
26 Dec 2007 15:00:42 -0000
Date: 26 Dec 2007 15:00:42 -0000
Message-ID: <
To:
Subject: After waiting and no response was heard
From: Adams Joseph <
Reply-To:
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Return-Path:
X-OriginalArrivalTime: 26 Dec 2007 20:45:15.0123 (UTC)
FILETIME=[37AB4430:01C84800]
Received 03:47PM
[DO NOT send email to any of the following email addresses]
X-Message-Delivery:
Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
X-Message-Status: n:0
X-SID-PRA: Adams Joseph <
X-Message-Info: 6sSXyD95QpUtbvzX1POAfQIy9rSTbifmJDvRZX
[space added]
osd1yuOcfi8L86aRdemBeO+vFt9M4fyu3LShxMuhXdxDCiMQ==
Received: from ns20689.ovh.net ([213.251.165.75]) by
bay0-mc5-f10.bay0.hotmail.com with Microsoft
SMTPSVC(6.0.3790.2668);
Wed, 26 Dec 2007 12:47:52 -0800
Received: (qmail 7271 invoked by uid 99);
26 Dec 2007 15:02:24 -0000
Date: 26 Dec 2007 15:02:24 -0000
Message-ID: <
To:
Subject: After waiting and no response was heard
From: Adams Joseph <
Reply-To:
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Return-Path:
X-OriginalArrivalTime: 26 Dec 2007 20:47:53.0099 (UTC)
FILETIME=[95D47DB0:01C84800]
Received 03:51PM
[DO NOT send email to any of the following email addresses]
X-Message-Delivery:
Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
X-Message-Status: n:0
X-SID-PRA: Adams Joseph <
X-Message-Info: 6sSXyD95QpUJ4xsC1+Jar0jFJiDveai8mFOwQ+
[space added]
DuTfo3v7ejjUY1aXm9mKwM6VBfq8oihcR7q5r7GylwmMAIfw==
Received: from ns20689.ovh.net ([213.251.165.75]) by
bay0-mc7-f3.bay0.hotmail.com with Microsoft
SMTPSVC(6.0.3790.2668);
Wed, 26 Dec 2007 12:51:03 -0800
Received: (qmail 18177 invoked by uid 99);
26 Dec 2007 15:02:40 -0000
Date: 26 Dec 2007 15:02:40 -0000
Message-ID: <
To:
Subject: After waiting and no response was heard
From: Adams Joseph <
Reply-To:
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Return-Path:
X-OriginalArrivalTime: 26 Dec 2007 20:51:03.0659 (UTC)
FILETIME=[0769A3B0:01C84801]
Received 03:57PM
[DO NOT send email to any of the following email addresses]
X-Message-Delivery:
Vj0zLjQuMDt1cz0wO2k9MDtsPTA7YT0w
X-Message-Status: n:0
X-SID-PRA: Adams Joseph <
X-Message-Info:
6sSXyD95QpUtbvzX1POAfQIy9rSTbifmJDvRZX
[space added]
osd1yuOcfi8L86aRdemBeO+vFt9M4fyu3LShxMuhXdxDCiMQ==
Received: from ns20689.ovh.net ([213.251.165.75]) by
bay0-mc6-f23.bay0.hotmail.com with Microsoft
SMTPSVC(6.0.3790.2668);
Wed, 26 Dec 2007 12:57:18 -0800
Received: (qmail 31620 invoked by uid 99);
26 Dec 2007
15:02:57 -0000
Date: 26 Dec 2007 15:02:57 -0000
Message-ID: <
To: [my email address]
Subject: After waiting and no response was heard
From: Adams Joseph <
Reply-To:
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Return-Path:
X-OriginalArrivalTime: 26 Dec 2007 20:57:18.0829 (UTC)
FILETIME=[E70809D0:01C84801]
Notes
All of the emails I received have the following in common (and I may have missed a few things):
- Exactly the same email six (6) different times (within 20 minutes), from purportedly the same person, to contact the same person.
- All were sent from 213.251.165.75, which, according to GeoBytes' SpamLocator is in Paris, France.
- All were received from ns20689.ovh.net.
- All have the same sender (Adams Joseph
<
adamsjoseph@ng.org >), same Reply-To:securitycompany@post.ro , and same Return-Path:anonymous@ns20689.ovh.net .
Problems I see:
- Obvious (to me, anyway) errors:
- from the email, itself:
- The salutation "Hello My Dear" from a professional? ... to a potential client? GEEZE!
- dumorage - no such word. s/b demurrage (A professional would NEVER make that mistake.)
- ANY time I receive more than one of the same email (especially spam) it sets off red flags.
- I have no clue what they were waiting for... I've never had contact with them.
- Dealing with Nigeria should be a HUGE red flag to everyone. Surely, by now, everyone's heard of "Nigerian Scams"!
- post.ro is a free email account from Romania. Why do I need to contact someone in Romania for a security company in Nigeria?
- Spelling, spacing and grammar errors abound.
- from the Email Headers:
- ng.org - when I tried to find www.ng.org, I got a NetIdentity link site, with an offer to get my own "ng.org" email address. Bet it's free!
- with a return path of anonymous @ anything, why would I want to deal with them?
- from the email, itself:
Send comments/questions about this page to Bill Sanders at:
Return to OFPv2/SSFF - Scams - Nigerian Scam Home page
Send email to Bill Sanders
()
with questions or comments about this page or site.
This site, all text and graphics (unless otherwise noted) on it
were designed, developed and published by Bill Sanders of Orange Frog Productions.
It and it's CSS was validated and complies with both the:
CSS and
HTML 4.01
validators from W3C.
NOTE: All CSS validates except the "New Window Buttons"
which include some invalid code (ie: hacks),
added PicoSearch Tables,
and warnings for using transparent backgrounds when color foregrounds defined.
Copyright © 2003, 2004, 2005, 2006, 2007 by Bill Sanders / Full site last modified: October 21, 2006
Any reproduction, printing, or selling of this content is
prohibited without express written consent from William D.
Sanders.
![Welcome to Orange Frog Productions Scams, Shams & Flim-Flams Section [Banner]](images/ssff/ofp_banner_ssff.jpg)




