joewein.de LLC
Fighting spam and scams
on the Internet

Home / Blog / About us
Spam
419/Nigeria
Online fraud
jwSpamSpy
Contact

Email Spam Filter:
jwSpamSpy
Try it for free!

Google

 

419 Scam – Frequently asked Questions (FAQ)

URL: http://www.joewein.de/sw/419faq.htm

FAQ:

    General information:
  1. What is this FAQ about?
  2. I received an email telling me I won in a lottery. Is this a scam?
  3. How do I know if an email is a scam?
  4. Why did I received this email?

    Detailed information about the fraud:
  5. I have already given personal data to the criminals. What will they do with it?
  6. I have already sent my phone number and address. What should I do?
  7. I have been asked for my bank account. Will the scammers steal money from it?
  8. I have not been asked for money or a bank acount. Is it still a scam?
  9. I can't find the address in my email on your blacklist. Is it still a scam?
  10. I have received a Bank draft / cashier's check / Money order. What should I do?
  11. I already sent money. How can I get it back?

    Fighting back against crime:
  12. How can I help fight this scam?
  13. I want these guys arrested. What must I do?
  14. How can I report scams to you?
  15. How can I help you gather evidence?
  16. If this a known scam, why are these guys not arrested?

    Other questions:
  17. Since when has this scam been around?
  18. What is a "mugu"?
  19. Scam terminology: "Guymen", lads, mugus, baiters and "jokers"
  20. Is anybody really so stupid as to fall for this scam?
  21. How can I stop receiving scam mails?

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!

What is this FAQ about?
This collection of frequently asked questions (FAQ) tries to answer questions about the Advance Fee Fraud ("419 scam"). The scam is named after the section of the Nigerian penal code dealing with fraud.

I received an email telling me I won in a lottery. Is this a scam?
Yes. Fake lotteries are the most common type of "419" scam. Consider the following (if after reading the list below you're still not sure, try submitting it to the
Scam-O-Matic, our Instant Online Fraud Check or visit the Scamwarners.com forum and ask for help there).

  • Did you buy a lottery ticket from this company? Did you even hear about them before? If not, it is obviously a fraud. The primary purpose of lotteries is to raise money. Therefore they require people to buy tickets in order to have a chance to win. Lottery companies do not organize "promotional" lotteries, they advertise. A free "promotional" lottery that you only hear about if you win would only promote the lottery to a handful of customers. That doesn't make any sense.

  • What information can you find about the company? Perform a Google search for the name of the lottery, the "claims agent" or his/her company. Do the top hits mention "fake", "fraud", "scam" or "419" or are there no matches at all? Also search for the "winning numbers" listed in that email. Do you find several "winning notifications" that look a lot like the one you received? How would that be possible if it was a real lottery where numbers change every week?

    Here is a search form for you to use:

    Google
  • In general, lotteries do not use email to notify winners. The normal procedure is for the winner to watch the media for the announced winning numbers and then to present his paper ticket to a lottery sales agent or to the lottery operator itself. Typically winners have six months to a year to come forward.

  • Was the email addressed to "none", to multiple recipients or even to the email address of the sender or did it say "Recipient list suppressed"? This indicates that the same email was sent to a large number of recipients. This would be highly unusual for a real lottery win notification.

  • Does the email tell you to contact a different email address or phone number for claiming your prize? Why would a real lottery do that? If the lottery claims to be based in the UK, the Netherlands or in Spain, does it use .co.uk, .nl or .es email addresses and website names?

  • Is the contact telephone number a mobile phone or special service number that forwards calls worldwide? This includes any of the following:
    • UK: +44-70xx (call redirection)
    • Netherlands: +31-6xx (mobile)
    • Spain: +34-6xx (mobile)
    • Belgium: +32-4xx (mobile)
    • South Africa: +27-7x or +27-8x (mobile)
    • Nigeria: +234-80x (mobile)

    Why would a major company give you a mobile phone as the first point of contact?

  • Are you being rushed? Is the claims deadline only a few weeks or even days away? Normal lotteries allow several months to a year for prizes to be claimed. In typical scams the claims deadline is only two to six weeks away, just enough time to extract money out of a "winner".

  • Does it mention a computer ballot of several tens of thousands of email addresses from America, Europa, Africa, Asia and Australia/New Zealand? There aren't any legitimate email lotteries of the kind described in such scam emails.

  • Does the email mention a "Sweepstakes International Program", an "International Claims Department", a "Fiduciary Agent" or a "Zonal Coordinator"? These terms are typical of fake lotteries.

  • Does the email mention a "mix up of some numbers" and a "security protocol", which requires you to keep all details secret until you've received your prize? This is so that other people won't point out that it's a fraud.

  • Are you being asked to pay hundreds of Euros or thousands of Pound before the money can be released? This usually happens after the second or third email you receive. Wake up and smell the rat! Real lotteries don't charge you for winning, they just write you a check. Any due taxes are either deducted at source or will be paid by you after you receive the money. If you supposedly won a lottery and you're asked to pay any amount of money towards receiving the prize then it's a scam and the prize isn't real.

  • Real lotteries don't send notifications by email, which is considered too unreliable to use for important financial information.

How do I know if an email is a scam?
The general rule of thumb is, if it sounds too good to be true, it probably is. There are a number of what we call "red flags", markers that show up in typical scam emails, such as certain phrases or certain ways of doing things. You can learn to spot these by yourself. For lottery winning notification scams, please see here. You can check any type of suspicious email by pasting it into the "Scam-O-Matic", our Instant Online Fraud Check form or by posting it in the Scamwarners.com forum where anti-fraud experts will be ready to give your their advice. The Scam-O-Matic will provide instant feedback and is able to recognize more than 80% of scams submitted to it. Its detection rate is even better if you supply a complete set of email messages and not just the most recent message or a portion of a message.

Why did I received this email?
Spammers send spam to make money. "419" scammers send spam to defraud people. To make as much money as possible, they hit as many email addresses as possible. If you received "419" spam or any other type of spam, it usually means a) your email address can be found on a website (try googling for it!) and b) that you are not using an effective spam filter.

  • Most email addresses targetted by spammers are listed as contact addresses on a website, in a link such as this one. Spammers use special address harvesting software to search websites for email addresses and for links. Harvesting addresses off websites for the purpose of spam is actually illegal under US Federal Law. The software adds all addresses to a file and then repeats the process for all pages mentioned in links. The initial page for the search is usually found via a search engine, in order to start off with pages that contain many addresses. Guestbooks are a prime target for address harvesters (see "What is a "mugu"?").
Once your address has become public knowledge, it's impossible to put the cat back into the bag. You either need to change email addresses (which is about as painful as changing phone numbers), or you need to use an effective filter. If you have found our website through a search for a name, email address or telephone number contained in a 419 scam that you have received, chances are you would never have seen that scam email if you'd been using our spam filter.

I have already given personal data to the criminals. What will they do with it?
It appears that the main purpose of asking the victim for personal data is not identity theft (i.e. a criminal comitting a crime in your name) but to lend the scam an aura of authenticity. The scammers print fancy looking "certificates" with the victim's name and postal address on it, data that he/she has previously gave to the scammers when first contacted. It's pure psychology.

Nevertheless, the chance of secondary abuse can not be excluded, especially for passport data and bank account information. Sometimes in Nigerian fraud the scammers send scans of passports or other forms of ID to "prove" their identity. We've seen copies of US, UK, South African and other African passports or driver's licenses used. This doesn't happen very often. We suspect some of these passport copies were supplied by victims of fake lottery scams.

There is a danger that bank account numbers are used for check fraud, i.e. for printing fake checks using victims' bank account information. This applies especially to North America, where personal checks are very common. Having said that, we have not personally come across such cases yet.

Other than passport scans we have not seen any evidence that the data collected during fake lottery scams is systematically used for other crimes. We can't give you any guarantees it won't happen, but at least it's not something that seems very common at this time.

If you would like to get further information about possible abuse of the data, take a printout of the form you filled in to your local police station or to your bank manager to get their professional advice.

I have already sent my phone number and address. What should I do?
Stop taking calls and don't reply to any emails from the scammers. You can tell them you know it's a scam and that you've talked to the police, if you want to get rid of them quickly. No need to mention our website to these criminals, though... The scammers want to make money. They can only make money by dealing with people who don't realize it's a scam. They would be wasting their time by staying in touch with you or doing anything other than look for new victims.

I have been asked for my bank account. Will the scammers steal money from it?
We don't have any current reports of any such thefts in the case of fake lottery scams, though there is no guarantee that the data you have provided will not be used for other scams in the future. Be warned that there are some such reports for "classic" 419 scams, even though they are not very commmon. For example, in scams were the 419 victim is offered to pose as an unpaid contractor or heir to a dead foreigner, the paperwork and ID submitted for those bogus claims is sometimes used in conjunction with bank account information for falsifying wire transfer instructions to the victim's bank to transfer money out of the account. To judge the risk of that, please discuss your concerns with your bank manager.

In general, the main purpose of asking for the bank account is only to encourage the victim's belief that he/she is really about to receive a fortune in that account very soon, in order to melt his/her resistance to sending money to the scammers. When the victim does indeed provide the number of an account, this indicates to the scammers that he/she has fallen for the scam and trusts them. Once the scammers find that a person is prepared to provide bank account details, name of the spouse and a copy of his/her driver's license or passport to them, it won't take long until they will ask him/her to send cash by Western Union because they think the person is firmly on the hook and ready to be reeled in.

I have not been asked for money or a bank acount. Is it still a scam?
Probably. Fake lottery scams and other variants of "419" fraud follow a fixed script that works in stages. In most cases the victim is not asked for money immediately, so as not to alert the spam recipients, who might report the email addresses to the webmail providers and get them shut down. Here is a typical sequence:

  1. Victim is notified via spam that he/she won a lottery prize and is told to contact a "claims agent".
  2. Victim contacts "claims agent", who replies and tells victim to fill in a form with personal data.
  3. Victim complies and is told that the winning is confirmed and he/she can receive the money, but only after paying various handling charges to the agent.
  4. Victim sends money by Western Union, criminal takes money and ignores complaints after prize is not paid out.
In some cases there is a third party, such as a fake bank or courier service, adding another stage. It can get pretty elaborate, with fees increasing after each payment, if there are multiple payments. All parties (other than the victim of course) are either the same person or members of the same gang.

I can't find the address in my email on your blacklist. Is it still a scam?
Probably. On average we add more than 250 addresses of "419" scammers to our list per day and there must be many more that we never see. This means there probably are thousands of criminals out there producing such scam emails, living off the proceeds.

If the address in your email isn't listed yet, it doesn't mean it's genuine. It probably just means it hasn't been reported to us yet. See the following links:

Please also report 419 spam to the abuse department of the company that provides their email accounts. For example, if the mail originates from mrjephills6@tiscali.co.uk then write to abuse@tiscali.co.uk, quoting the full text of the mail including message headers (in Outlook Express you get the full message source via Ctrl+F3; use cut+paste to insert that into your email).

I have received a Bank draft / cashier's check / Money order. What should I do?
Some fake lottery scams as well as other scams by gangs from Nigeria involve counterfeit monetary instruments, such as fake cashier's checks or US Postal Money Orders (MO). Counterfeit instruments are also used in other scams from Nigeria, such as fraudulent purchases of cars, motor bikes and other vehicles as well as horses and other animals. By pretending to first make a payment to the victim, the criminals overcome a reluctance by the victim to send cash to a total stranger in another country.

So how does this work? Any funds made available by a bank against a deposited check or MO become due again when that check or MO bounces (i.e. is recognized as fake by the bank that supposedly issued it). This could be weeks or even months after those funds were wired to another country by the victim as requested by the criminals. The victim will in effect have wired money borrowed from the bank and will be fully liable for that amount. Here is an example:

The fake checks or MOs are normally mailed from Canada, Nigeria or the UK, though other countries are possible too. They may be part of an elaborate scheme where some person or institution lends funds to a "lottery winner" (the victim), who is unable to come up with the amount demanded for bogus "processing charges" or a minimum deposit for a fake "private bank". They are also used in purchases of big ticket items such as cars. The buyer will send a check that vastly exceeds the value of the car and request the seller to cash it and wire the excess amount to a person who will take care of shipping the purchased car to the buyer. Other examples are "debt repayment" from a third party by check or collecting payments from customers on behalf of a bogus company in Europe, Asia or Africa.

Never deposit such checks or money orders or you could be charged with fraud yourself. In fact under US laws even possession of fake checks and money orders is illegal. Contact your local police and give them check as well as printouts of all emails you have received from the criminals. It's better not to touch the checks or MOs: There may be useful fingerprints on them.

Forward us copies of the emails that preceeded the arrival of the check or MOs. We may be able to identify which other scams this is connected to. See:

I already sent money. How can I get it back?

In most cases the answer is you can't.

Most online scams are not seriously investigated by the police. Basically as soon as they find out the criminals are based abroad they give up, because the effort to track down the criminals would be considerable and the chances of success too uncertain. In the United States the FBI only gets involved in online scams such as fake lotteries, fake inheritance claims, etc. with criminals based in Nigeria, Cote d'Ivoire if damages exceed about $100,000. This unfortunately means that such crimes are almost without risk for the criminals. But even in cases where criminals are arrested and convicted in court it is rare that their victims are compensated, because the money has often disappeared by then.

Personally I don't know of a single case where a 419 victim has got his/her money back.

Realistically the only chance to get money back is if you have made a wire transfer a few hours ago and the money hasn't been picked up yet and you phone Western Union / MoneyGram / the bank to cancel the transfer. If this happens soon enough all you lose is the cost of transfer, with the remainder refunded. Once the money has been picked up, it is gone forever.

That's why we try to put as much information online as possible, so victims find out it's a scam *before* they send money.

Beware of any emails, often pretending to originate from official sources in West Africa, Europe or in the USA which tell you they know about the scam and request details about it to help you get your money back. These usually are sent by the very same criminals who cheated you in the first place. The objective is to get you to send even more money, because the "help" never comes for free. You won't get your money back. Instead you'll lose even more money. The criminals are extremely cruel and without conscience, driving many of their victims into ruin.

How can I help fight this scam?
What can I do to protect others from this scam?
Since you've discovered this website, you know that a suspicious email you received is a scam. Many others do not know and are still at risk. Here is how you can help:

  • Report spam: Report any 419 spam to the webmail provider used to send the spam or to receive replies (see abuse contact list). For example, if the mail originates from mrjephills6@tiscali.co.uk or if that address is listed as a person to contact then write to abuse@tiscali.co.uk, quoting the full text of the mail including message headers (in Outlook Express you get the full message source via Ctrl+F3; use cut+paste to insert that into your email).
    In particular, report any contact addresses mentioned in the body of the spam itself, such as "claims agents" of fake lotteries. These are the most important mailboxes the scammers use. The sooner we get them shut down, the fewer victims there will be.

  • Inform others: Talk about this scam to your family and colleagues at work.

  • Pinging: Contact the scammers from a disposable Yahoo account to get them to reply, then forward the reply as evidence to us (see here for more details).

  • Scambaiting: You can help collect evidence against scammers and waste their time by contacting them from a webmail account (Warning: Do not use your normal email account to do this!). For example, you can create an account at Yahoo.com (link) and then paste the email you received into a message you compose, as if you had received the spam in your Yahoo account. Once you receive a reply, forward a copy of the reply from the criminals to us. To forward an email in Yahoo Mail as an attachment, hold down the Control key while clicking on the Forward button, then address the email to 419@419scam.org. Receiving such replies from "claims agents", "barristers" and "securities companies" allows us to track the true location from which the scammers send their emails (we don't need the emails you sent to the scammers, only their replies). If you really want to waste scammers' time, visit http://www.scambaits.net and read their advice on the art of scambaiting :-)

  • Support our efforts: Thousands of people have been alerted to this scam through our website. They used a search engine and found an email address, a name or a telephone number from a 419 email listed by us. Compiling and publishing such information to educate people like you and your family is a time-consuming process for us. Unlike the criminals we take on, we don't make any money from the time we spend. If you appreciate what we are doing and would like to support our efforts, please make a donation (PayPal or credit card - $10, $20 or any amount!) to us. Thank you!

  • Filter spam: You can stop receiving 419 and other spams and at the same time support our efforts by purchasing a copy of jwSpamSpy, our spam filter for Windows 2000/XP (US$29.95 / €25 / £18). It has a 30 day free trial period and supports email programs such as Outlook Express or Microsoft Outlook on Windows (not available for Yahoo.com or AOL.com).

  • Report to the police: Report 419 spam to law enforcement in your own country, such as the local police or (in the US) the US Secret Service. An overview of reporting addresses for various countries can be found at the

    If you need to contact law enforcement in Nigeria, the Economic and Financial Crimes Commission (EFCC), a body set up by the Nigerian government in 2002, may be helpful:

  • Spamtraps: If you have a website you can embed email addresses on pages on your site so they are found by address harvesting software or spammers. We can provide you with an email address that you can hide there or you can create your own email account and have it forward email to one of our spamtraps. Please contact us for details! The more fraud spams we receive, the more criminals we can warn people about.

  • Sabotage: Many fraud emails give contact phone numbers. Carefully check the local time before you make any calls, because who would want to be woken up at 3am? If the number starts with +44 70 or +234 80 then check the local time in Lagos, if the number starts with +31 6 or +34 6 check the local time in Amsterdam or Madrid. Some people reply to 419 spam emails and ask the criminals to call them back, giving them phone numbers of other 419 scammers to call. Some people mail large files such as digital snaps to the contact addresses listed in the emails. This can fill up their mailboxes pretty quickly, preventing emails by potential victims from reaching the criminals.

I want these guys arrested. What must I do?
This almost never happens - arrest rates for this type of crime are very low. There are a number of reasons for this. This type of crime crosses national borders and uses a relatively anonymous medium, the internet as well as cellphones. There is no crime location as such and investigations are very technical in nature. There is still too little specialized expertise within the police forces. Also, as a white collar crime it does not get the same kind of resources as violent crime or the ideologically driven so-called "war on drugs".

To get an investigation started you have to report the case to law enforcement in your own country, no matter what phone numbers are listed in the emails. Some countries have institutions that specialize in fraud or online crimes. For example, in the United States the Secret Service investigates financial fraud cases. In other countries special sections of the regular local or state police force will handle reported cases.

An overview of reporting addresses for various countries can be found at the

If this a known scam, why are these guys not arrested?
If you want to find out for yourself, take a printout of a 419 scam email to a police station and try to report a criminal fraud. The officers will basically tell you to delete or ignore such emails when you get them, but not do much more. The sad fact is, the police does not have the resources or the training to cope with the current volume of online scams (though billions of dollars seem to be available for fighting a fruitless "war on drugs", arguably itself an advance fee fraud, but I digress...).

There is no real crime location in online fraud, which raises issues of under which jurisdiction the crime was committed. In most cases the victim and the criminals live in different countries, which means multiple police forces have to cooperate. This is complicated by the fact that classic 419 havens such as Nigeria or other West African countries have major corruption problems. Cote d'Ivoire (Ivory Coast) is in the middle of a civil war and some cities in Nigeria are basically "no go"-areas for the Nigerian federal police.

419 fraud is an industry that on some estimates makes hundreds of millions of dollars per year. It employs thousands of crooks, who vastly outnumber the police officers who investigate their scams. This is not just a few young guys going to an internet cafe to cheat some foreigners. In many cases, African internet cafes are owned by the gang bosses, who pay young men hourly wages for "working" in 419-sweatshops. These bosses are politically well connected and pay off the right people.

Therefore, don't expect this problem to go away any time soon. Instead, expect it to get worse. To use a classic phrase from Nigeria scams, these scams are almost "100% RISK FREE" for the scammers.

How can I report scams to you?
We have received many emails from near-victims who backed out of a fake lottery or other advance fee scam or fraudulent business transaction after they did a search for an email address, name or phone number and came across it on our 419 blacklist. We publish such data to warn potential victims about such scams. The more scammers we can get listed, the more crimes will be prevented. You too can help!

If you've received what looks like a 419 spam (basically, any email from a stranger that promises an unexpected fortune), you're welcome to send us a copy. Please make sure to include the five character string [419] in the subject line of the email (you can follow this with further details, such as name of the fake lottery or other company, alias or email address of the criminal, phone numbers, etc). Examples:

Subject: [419] MICROSOFT EMAIL LOTTERY INTERNATIONAL
Subject: [419] james_robin1@hotmail.com
Subject: [419]

We strongly prefer mails that are submitted as an attached email. That way we will receive an exact copy of the mail you received, as an attachment. We will put that into our database and process it with our spamfilter, which not only lets us verify it looks like a real 419 mail, it also extracts the 419 sender address automatically and we can find out which email provider the criminals used and other information useful for tracking them. Alternatively, you can use copy and paste using the Scam-O-Matic webform, see further below.

How to report fraud by e-mail using Outlook Express
If you are using Outlook Express, open or select the fraud email, then click "Message" and "Forward as Attachment". Type our address <419@419scam.org> into the To: field, use [419] and optional extra information as the subject (see examples above) and click the "Send" button.

How to report fraud by e-mail using Yahoo mail
If you are using Yahoo mail (Classic), open the email, hold down the Control key and click on the "Forward" button. Type our address <419@419scam.org> into the To: field, use [419] as the subject and click the "Send" button.

How to report fraud by e-mail using Incredimail

  • Use File / Save As to save the email somewhere on your hard disk (name doesn't matter).
  • Repeat previous step as necessary for multiple emails.
  • Create a new mail addressed to 419@419scam.org and attach the file(s) created in the previous steps.

How to report fraud using the "Scam-O-Matic" webform

Please do not use the normal "Forward" function of your email program, if possible. Please do not paste email contents into Word documents. If you do not know how to forward an email as an attachment or none of this makes any sense to you, use either use the "Scam-O-Matic" webform or the normal "Forward" function. With the latter, please make sure to include the five character string [419] in the message subject. If you do use the "Forward as attachment" function, you should still mark the message subject as [419].

Note: If you forward a 419 scam mail in the body of your email to us (inline forward) without marking the subject then in some cases the mail is indistinguishable by software from a real 419 email. It may get intercepted by our filter because it looks too much like spam from a spammer. You sure don't want that to happen, because in effect you would have accidentally submitted your own email address to the blacklist ;-)

Therefore, submit the mail as an attachment, or to the webform or mark the subject and you'll be safe!

You should also report 419 scam addresses to the abuse-department of the email provider they used. In addition, you can contact law enforcement or appropriate government institutions in your country. See the following for more details:

How can I help you gather evidence?
If you receive a fraudulent "lottery winning notification" or "business proposal" (i.e. any offer of easy money as described on our website), you can help us gather evidence by "pinging" (see
definition) the scammers and forwarding the response to us. This wastes the scammers time and helps us to track them. Follow these steps carefully:

  1. Create a Yahoo email account using an assumed name (you only need to do this once for multiple scam emails you receive). Either the main Yahoo.com website or national variants (yahoo.co.uk, yahoo.ca, yahoo.fr, yahoo.de) are fine. You should probably turn off the Yahoo spamfilter. Not all webmail services are suitable (e.g. Hotmail is not), but Yahoo is perfect for this.
  2. Open Yahoo! Mail, select "Compose" and paste the body of the scam email into the new email. Paste the email address from either the body of the message ("claims agent", "confidential private email address", etc.) or from the sender address, if there no explicit reply address, into the "To:" field.
  3. Add a suitable subject line (this can be copied from the original scam email, maybe with a "Re: " prefix). Then add some brief text at the beginning to make this look like a "real" response, but don't overplay it. Examples (please vary these and use your imagination):
    • "Hello, I'd like to claim my lottery prize, see message below"
    • "This business proposal sounds interesting. Please send me more information!"
    • "Is this a joke or is it real?"
    • "how soon can i get this money? i could really do with it !!!"
    • "I RECEIVED THIS MAIL. WHAT DO I NEED TO DO ???"
    Then click "Send".
  4. You should get a reply within 24-72 hours, often from a different email address. Open that reply from the scammer and forward it to us (we only need the scammer's reply, NOT your email to the scammer):
    • Mark an identifying portion of the mail, such as the lottery name or alias of the scammer and copy it to the clipboard.
    • Hold down the control key while clicking the "Forward" button.
    • Change the subject to the five characters [419] followed by a space and then paste the lottery name or alias of the scammer from the clipboard (anything after [419] is optional).
    • Address the email to 419@419scam.org (it's quickest if you add this address to the Yahoo address book.
    • Click "Send".
You will find that the scambaiting account soon starts attracting new 419 spam, i.e. initial spam messages, not just replies you requested. You can also forward those to us.


The term "ping" originally meant the high pitched sound used by a submarine to measure distances to objects, such as the seabed or another vessel. By bouncing sound off an object and measuring the runtime the sonar system could determine how far apart it was. The same term is used on the internet to describe a minimal packet sent to another host to test connectivity and speed.

"I HAVE TO INFORM YOU THAT I AM VERY DISSAPOINTED WITH YOUR ATTITUDE ON ALL ISSUES CONCERNING THIS TRANSACTION AS I HAVE NOT HEARD FROM YOU ALL THIS TIME.
I HAVE CONTACTED THE SECURITY COMPANY WERE THIS GIVEN FUND IS DEPOSITED FOR IMMEDIATE RELEASE AND I HAVE BEEN WAITING FOR YOU TO RESPOND TO MY MAILS AS I AM NOT HAPPY WITH YOU.
PLEASE IF YOU WISH TO CONTINUE WITH THIS TRANSACTION SIMPLY SEND YOUR INFORMATIONS TO ME IN GETTING THE NECESSARY LEGAL DOCUMENTS THAT WILL ENABLE US TO FACILITATE THE IMMEDIATE RELEASE OF THIS GIVEN FUND AS AT THIS TIME."
from 64.4.51.205 by by107fd.bay107.hotmail.msn.com with HTTP;
Tue, 03 May 2005 11:39:47 GMT

Since when has this scam been around?
Current 419 fraud emails involving "Nigeria fraud" and fake lotteries trace back to an idea known as the "Spanish prisoner scam", which goes back to before 1914 (World War I) and before it the "Letter from Jerusalem scam" documented by Vidocq after the French Revolution:

Modern variants of the scam started circulating from Nigeria by fax and postal mail in the 1980s and netted quite a few, often quite wealthy victims worldwide during the 1990s. The scam crossed over into email in the late 1990s. The oldest 419 email in our own collection was sent in March 2000. By May 2001 we were getting more than one 419 email per week already. In January 2002 we started receiving more than one per day. Now it's about 40 per day in our main email account and 400-900 per day in our total spam feed.

What is a "mugu"?
The word "mugu" (which means "fool") is used by junior "419" scammers who collect addresses for 419 scams from website guestbooks. These so called "guymen" use the term in non-sensical entries to mark guestbooks already harvested for spamming. The idea is to prevent fellow scammers from offering competing but equally dubious "BUSINESS PROPOSALS" to the same victims (which might alert them to the fact that both proposals are scams). Email addresses in such gustbooks, or at least all addresses in entries posted before the "mugu" posting are supposed to be off-limits to other scammers.

If you have a guestbook on your site, make sure email addresses are not displayed to other visitors, so that your visitors are spared "419" and other spam. If you have log files for guestbook postings, track the IP addresses used for "mugu" postings and block them in the .htaccess file of your website if they happen to be from Nigeria, Togo or Côte d'Ivoire.

Scam terminology: "Guymen", lads, mugus, baiters and "jokers"
Who is who:

Is anybody really so stupid as to fall for this scam?
This is not a matter of intelligence. Some of these scammers are actually very good at what they are doing. They know what buttons to push, psychologically speaking. The techniques used by the scammers have been developed and refined over many years.

You would be surprised just how many people from all walks of life have become victims of this scam. Some are businessmen or academics. In some cases people have even committed other crimes, such as stealing money from their employers, to cover the advance fee payments, hoping they would be able to repay the money from the promised fortune before anybody would notice.

It is not merely a matter of intelligence, but of circumstances and psychology. If you are an immigrant or someone for whom English is not your first language it is more difficult to pick up on signs of fraud. We have found that some people who contact us about the scam really need to be talked out of it. This is especially true if someone is in a difficult economic situation. A sudden lottery win would appear like the solution to all their problems. If you are a mother with a handicapped child or a husband with a sick wife without medical insurance, or if you run a small business going though hard times then a million dollars dangling in front of your nose can develop a magic attraction that gets the better of common sense.

The scammers take advantage of vulnerable people and they know it.

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!

How can I stop receiving scam mails?
Reading 419 spam emails can be somewhat entertaining at first, but the novelty value soon wears off. Then you will hit the delete key to get rid of these nuisance mails, day after day. Blocking by sender address or reporting mailboxes to the providers are only partial solutions, because "419" senders create new email accounts all the time - we collect almost 300 new addresses every day! More intelligent tools are required. A good spam filter can be a highly effective tool for keeping fraudulent mails out of your inbox. The vast majority of "419" sender addresses published on our website is gathered by automatically scanning hundreds of thousands of emails every day. The spam filter we developed and use is available as a commercial product for your desktop (for Windows 2000/XP and with ISPs that provide POP3 access).