419 Scam Example: "Ail Momo", NigeriaThe following email is an example of the 419 scam mostly operating out of West Africa:
Return-path: <email@example.com> Delivery-date: Thu, 19 Jun 2003 01:48:47 +0200 Received: from moutng.kundenserver.de (moutng.kundenserver.de [188.8.131.52]) by puzzle.pobox.com (Postfix) with ESMTP id 9D1C226C4AB for <MUNGED@MUNGED>; Wed, 18 Jun 2003 19:48:43 -0400 (EDT) Received: from [184.108.40.206] (helo=mxng03.kundenserver.de) by moutng.kundenserver.de with esmtp (Exim 3.35 #1) id 19SmfS-0007Fd-00 for MUNGED@MUNGED; Thu, 19 Jun 2003 01:48:42 +0200 Received: from [220.127.116.11] (helo=n2now2991.com) by mxng03.kundenserver.de with smtp (Exim 3.35 #1) id 19SmfM-0001tp-00 for MUNGED@MUNGED; Thu, 19 Jun 2003 01:48:37 +0200 From: "MOMOH AIL" <firstname.lastname@example.org> Reply-To: email@example.com To: MUNGED@MUNGED Date: Thu, 19 Jun 2003 00:49:07 -0700 Subject: DEAR FRIEND X-Mailer: Microsoft Outlook Express 5.00.2919.6900 DM MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Message-Id: <E19SmfMfirstname.lastname@example.org> FROM: MR. AIL MOMOH. Dear , I have picked-up the trust and courage to write you this letter with divine confidence that you are a reliable and honest person who will be capable for this important business transaction believing also that you will let me down either now or in the future. My name is ail momoh a senior Auditing Officer with the AFRICAN DEVELOPMENT BANK in Nigeria. There is an account opened in this bank in 1980 and since 1996 nobody has operated on this account again. I discovered that if I do not remit this money out urgently it would be forfeited to the government as dormant account. The owner of this account is Mr. Duckson Fritz, a foreigner, he was a miner at Kruger Petroleum oil and gas Company, a geologist by profession, and he died since 1996 in a plane crash. No other person knows about this account or anything concerning it, the account has no other beneficiary and my investigation proved to me as well that this company does not know anything about this account and the amount involved is (US$12 million) Twelve million United States Dollars. I want to transfer this sum of Twelve million United States Dollars into a safe foreign account abroad. I am contacting you based on the fact that you are a foreigner because this money can only be approved for payment to a foreigner. I know that this proposal will come to you as a surprise as we don't know ourselves before. However I got your contact from a trade consultant in South Africa, though I did not disclose the purpose of my seeking for a foreign business partner to him. Although we will still have to meet to sign some agreement before the final transfer of the fund into any of your designated bank account. I have involved a very senior official in the operational department, and we have agreed that after the transfer of the money into your account, you shall be entitled to 30% of the total sum, my colleagues and I will have 60% while 10% will be used to reimburse any expenses incurred. All necessary precautions have been taken to ensure a risk free situation on the side of both parties. Please note that this deal can only take place on the following conditions; 1. Absolute confidentiality and sincerity will be required and guaranteed, considering our positions in the bank. 2. Assurance that our own share will be released to us in good faith when this money finally gets into your account and send me your telephone and fax numbers. All things being equal, this transaction will be within 10 working days as soon as we hear from you. Please treat with utmost confidentiality. Contact me as quickly as possible through my above e-mail or my alternative e-mail:email@example.com telephone and fax numbers will be needed for easy communication. Expecting your urgent response, Best Regards, Yours faithfully, MR. AIL MOMOH
Network address range 18.104.22.168 - 22.214.171.124 is hosted by Lucxtra Telecommunications in Nigeria.
Notice the X-Mailer: line:
X-Mailer: Microsoft Outlook Express 5.00.2919.6900 DMThe 'DM" at the end identifies it as a spamware mailer that is very popular in the 419-scam scene. Practically every mail using this mailer is a 419 scam letter. However, most 419 mails are sent via other mailers.