419 Scam – "W.W.S LOTTERY (Paul Duffy)"
"W.W.S LOTTERY (Paul Duffy)" is a fake lottery run by a gang in Nigeria and the UK. The criminals try to get victims to wire US$ 1,200 to the UK by Western Union wire transfer.
Send us any replies by "claims agents", especially money demands and payment instructions, we will publish them here.
Please forward copies of fraud emails to the abuse department of the webmail address listed as the contact email for the "claims agent" and ask for the address to be suspended because it is used in a 419 fraud (see 419 FAQ).
From: "Paul Duffy" <firstname.lastname@example.org> To: Firstname Lastname <emailaddress> Sent: Monday, 11 April, 2005 19:11 Subject: Congratulations In response to your mail with Reference and Batch number Ref:EAAS/941OYI/04 Batch:03/06/MA34, I wish to identify myself as Mr. Paul Duffy the fiduciary agent of the W.W.S LOTTERY Incharge of your account. After I got your mail I had to check through our data base and found out that you are really a winner with the W.W.S LOTTERY and it is my duty to help you process your winning. First you will need a Winner's Certificate which will cover you as the lucky winner of the Grand Cash Prize of US$500,000 because your Cash Prize will be paid to you by our Correspondent Bank here in LONDON through KTT TRANSFER and before they will make payment to you, they will request you to present to them the CLASSIFIED ORIGINAL COPY of your Winner's Certificate, which will be prepared in your favour as a winner and sent to you via Special Courier Service. For this reason you will be needed to send to us, YOUR FULL NAMES AND ADDRESS, PRIVATE PHONE AND FAX NUMBER AND HOW YOU WANT YOUR GRAND CASH PRIZE TO BE PAID TO YOU. Your form will be sent to our Correspondent Bank and they will get in touch with you via phone or fax to inform you that your fund is ready for transfer and that you should present to them your proof of ownership to this fund, which is your Classified Original copy of this Winner's Certificate. If you cannot provide an account where your fund could be transferred to, please notify us as you will be needed to travel to our financial security company in Amsterdam, to recieve your fund in person. You may call me on +447040108691 or email me for more information . Fax:00448717338066 Once again "CONGRATULATIONS". I await your urgent response to this mail. Sincerely, Paul Duffy.
Received: from [18.104.22.168] by web25707.mail.ukl.yahoo.com via HTTP; Mon, 11 Apr 2005 12:11:03 CEST Date: Mon, 11 Apr 2005 12:11:03 +0200 (CEST) From: Paul Duffy <email@example.com> Subject: Congratulations
netname: GILAT-SATCOM-BLOCK-19 inetnum: 22.214.171.124 - 126.96.36.199 netname: GILAT-SATCOM-BLOCK-19 descr: Gilat-Satcom remarks: For abuse issues related to Gilat, email firstname.lastname@example.org notify: email@example.com country: GB admin-c: GS3350-RIPE tech-c: GS3350-RIPE status: ASSIGNED PA mnt-by: AS9116-MNT mnt-lower: AS9116-MNT changed: firstname.lastname@example.org 20050102 source: RIPE route: 188.8.131.52/18 descr: Goldenlines remarks: For addressing issues, email email@example.com remarks: For abuse issues, email firstname.lastname@example.org origin: AS9116 mnt-by: AS9116-MNT changed: email@example.com 20041121 source: RIPE role: Gilat Support address: Gilat Satcom address: 21D Yagia Kapaim st. Petach-Tikva, Israel phone: +972 3 9255000 fax-no: +972 3 9217938 admin-c: DR5299-RIPE admin-c: GE2074-RIPE tech-c: DR5299-RIPE tech-c: GE2074-RIPE trouble: firstname.lastname@example.org e-mail: email@example.com nic-hdl: GS3350-RIPE mnt-by: AS9116-MNT changed: firstname.lastname@example.org 20040909 source: RIPE
ATTN: Firstname Lastname, RE:YOUR WINNERS CERTIFICATE IS READY. WE HAVE FINALLY VERIFIED YOUR INFORMATIONS, YOUR ADDRESS AND PHONE NUMBER AND NAMES, AS WELL AS YOUR DATAS. ALL WAS AUTHENTICATED BY OUR VERIFICATION AGENT IN CANADA. HOWEVER, SINCE THE CERTIFICATE IS YOUR PROOF OF WINNING AND IS THE DOCUMENT YOU NEED TO PRESENT TO OUR SECURITY FINANCE COMPANY BEFORE THEY CAN TRANSFER YOUR WINNING PRIZE TO YOU , WE WOULD NEED TO SEND THE CERTIFICATE BY COURIER MEANS TO YOU AS SOON AS YOU RESPOND. AS YOU KNOW THE RULES, YOU WOULD BEAR THE COST OF SENDING YOUR WINNER'S CERTIFICATE TO YOU. I HAVE BEEN DIRECTED TO INFORM YOU OF THE TOTAL COST AND BREAKDOWN OF SENDING THE WINNER'S CERTIFICATE TO YOU BY SPECIAL COURIER SERVICE, WHICH WOULD BY IT'S NATURE GET TO YOU WITHIN 48 HOURS FROM WHEN IT IS SENT BY THIS OFFICE. COST OF FRIEGHT (COURIER) DHL...........................60:00Pounds INSURANCE FEES ON DOCUMENTS........................350:00Pounds ADMINSTRATIVE FEES...............................................200:00Pounds TOTAL............................................................610:00Pounds WE PREFER YOU SEND THE ABOVE COST AMOUNT THROUGH THE WESTERN UNION MONEY TRANSFER AS IT IS EASIER AND WOULD FACILITATE THE QUICK DESPATH OF YOUR WINNER'S CERTIFICATE. YOU SHOULD SEND TO OUR ACCOUNT OFFICER IN-CHARGE OF PAYMENT COLLECTION. SEND TO: NAME: JOHN ADAM ADDRESS: LONDON, U.K. AS SOON AS YOU SEND THE CHARGES THROUGH THE WESTERN UNION, DO SEND THE WESTERN UNION CONTROLE NUMBER, TEST QUESTION AND ANSWER TO THIS E-MAIL BOX FOR ADMINISTRATIVE PURPOSES AND FOR YOUR RECORDS. SEND THE WESTERN UNION MTCN NUMBER AND ALSO THE TEXT AND ANSWER QUESTION.ALSO NOTE THAT YOU DO THIS ASAP SO THAT YOUR NAME WILL BE INCLUDED IN THE BATCH THAT IS LIVING FOR REMITTANCE OF THERE FUNDS TO THE SECURITY FINANCE COMPANY. ONCE AGAIN WE SAY CONGRATULATION REGARDS
Received: from [184.108.40.206] by web25704.mail.ukl.yahoo.com via HTTP; Tue, 12 Apr 2005 10:36:44 CEST Date: Tue, 12 Apr 2005 10:36:44 +0200 (CEST) From: Paul Duffy <email@example.com> Subject: YOUR WINNER CERTIFICATE IS READY
inetnum: 220.127.116.11 - 18.104.22.168 netname: CW-NITEL-RESERVED-NET descr: Net reserved for customer NITEL country: GB admin-c: GNOC4-RIPE admin-c: IH22-ORG admin-c: NTL1-RIPE tech-c: GNOC4-RIPE status: SUB-ALLOCATED PA notify: firstname.lastname@example.org mnt-by: CW-IPGNOC-MNT mnt-lower: CW-EUROPE-GSOC mnt-lower: AS5378-MNT mnt-domains: AS5378-MNT changed: email@example.com 20041014 changed: firstname.lastname@example.org 20041119 source: RIPE route: 22.214.171.124/21 descr: Route for customer NITEL origin: AS1273 mnt-by: CW-EUROPE-GSOC changed: email@example.com 20041028 source: RIPE role: Internet Network Services Technical Department address: Cable and Wireless UK Operations address: 76 Hammersmith Road address: Hammersmith address: London, address: GB phone: +44 20 7825 6000 fax-no: +44 20 7825 6000 e-mail: firstname.lastname@example.org trouble: ------------------------------------------------ trouble: Please do NOT e-mail abuse to the contacts given trouble: here, e-mail them to email@example.com instead. trouble: ------------------------------------------------ trouble: Network Status Page: http://www1.uk.cw.net/ trouble: Information: http://www.cw.com/ trouble: ------------------------------------------------ trouble: ** Contact by E-Mail ONLY. *** trouble: ------------------------------------------------ admin-c: RW1210-RIPE tech-c: RW1210-RIPE tech-c: FM466-RIPE tech-c: JH71-RIPE tech-c: RC1510-RIPE tech-c: FM1414-RIPE tech-c: SM2390-RIPE tech-c: AM3376-RIPE notify: firstname.lastname@example.org nic-hdl: IH22-ORG mnt-by: AS5378-MNT changed: email@example.com 20031021 source: RIPE role: Cable and Wireless IP GNOC Munich remarks: IP Admin Department address: Landsbergerstr. 155 address: 80687 Munich address: Germany e-mail: firstname.lastname@example.org admin-c: UK808-RIPE tech-c: TOC-RIPE tech-c: HRO-RIPE tech-c: SM6163-RIPE nic-hdl: GNOC4-RIPE mnt-by: CW-IPGNOC-MNT changed: email@example.com 20040203 changed: firstname.lastname@example.org 20040727 changed: email@example.com 20041105 source: RIPE role: Nigeria Telecommunications Limited address: No 2 Bissau Street address: Wuse zone 6, Abuja address: F.C.T. address: Nigeria e-mail: firstname.lastname@example.org org: ORG-NTL4-RIPE admin-c: KUO1-RIPE tech-c: LdW10-RIPE tech-c: AS7075-RIPE nic-hdl: NTL1-RIPE mnt-by: CW-IPGNOC-MNT changed: email@example.com 20041117 source: RIPE