joewein.net   joewein.de LLC
fighting spam and scams on the Internet
Try our spam filter!
Free trial for 30 days
  jwSpamSpy

Home
About Us
Spam
419/Nigeria
Fraud
Contact

"419" Scam – Advance Fee / Fake Lottery Scam

The so-called "419" scam is a type of fraud dominated by criminals from Nigeria and other countries in Africa. Victims of the scam are promised a large amount of money, such as a lottery prize, inheritance, money sitting in some bank account, etc.

Victims never receive this non-existent fortune but are tricked into sending their money to the criminals, who remain anonymous. They hide their real identity and location by using fake names and fake postal addresses as well as communicating via anonymous free email accounts and mobile phones.

Keep in mind that scammers DO NOT use their real names when defrauding people.
The criminals either abuse names of real people or companies or invent names or addresses.
Any real people or companies mentioned below have NO CONNECTION to the scammers!

Read more about such scams here or in our 419 FAQ. Use the Scam-O-Matic to verify suspect emails.

Click here to report a problem with this page.

 

 

Some comments by the Scam-O-Matic about the following email:

Fraud email example:

From: (sent from abused email account)
Date: Fri, 7 Nov 2008 06:47:24 -0800 (PST)
Subject: CIA GENERATED BOGUS "WELLSFARGO Acct" SCAM/PHISHING/possible VIRUS



WellsFargo Account Security Measures Notification [Wednesday, November 05, =
2008 23:26:18 PST -0400 UTC]
Thursday, November 6, 2008 8:06 AM

>From Wells Fargo Thu Nov 6 07:06:03 2008




Return-Path:=20

<wellsfargo@wellsconnect.wellsfargo.com>=20

Authentication-Results:=20

mta198.mail.re3.yahoo.com from=3Dwellsconnect.wellsfargo.com; domainkeys=3D=
neutral (no sig)=20

Received:=20

from 195.121.247.25 (EHLO psmtp13.wxs.nl) (195.121.247.25) by mta198.mail.r=
e3.yahoo.com with SMTP; Fri, 07 Nov 2008 03:39:42 -0800=20

Return-path:=20

<wellsfargo@wellsconnect.wellsfargo.com>=20

Received:=20

from antwoordservicebuising.nl ([77.61.239.169]) by psmtp13.wxs.nl (iPlanet=
Messaging Server 5.2 HotFix 2.15 (built Nov 14 2006)) with ESMTP id <0K9X0=
0GWH3A4UA@psmtp13.wxs.nl>; Thu, 06 Nov 2008 16:06:06 +0100 (MET)=20

Received:=20

from User ([82.95.101.8]) by antwoordservicebuising.nl with Microsoft SMTPS=
VC(6.0.3790.3959); Thu, 06 Nov 2008 16:06:03 +0100=20

Date:=20

Thu, 06 Nov 2008 16:06:03 +0100=20

From:=20


Wells Fargo <wellsfargo@wellsconnect.wellsfargo.com>=A0=A0Add sender to Con=
tacts=20

Subject:=20

WellsFargo Account Security Measures Notification [Wednesday, November 05, =
2008 23:26:18 PST -0400 UTC]=20

Bcc:=20



Message-id:=20

<ASBSERVER0R1hY55Zod00000ea2@antwoordservicebuising.nl>=20

MIME-version:=20

1.0=20

Content-type:=20

text/html; charset=3DWindows-1251=20

Content-transfer-encoding:=20

7BIT FILETIME=3D[2FF7D7C0:01C94021]=20

Content-Length:=20

2714=20
Compact Headers


if (typeof YAHOO =3D=3D "undefined") {
var YAHOO =3D {};
}
YAHOO.Shortcuts =3D YAHOO.Shortcuts || {};
YAHOO.Shortcuts.hasSensitiveText =3D true;
YAHOO.Shortcuts.sensitivityType =3D ["sensitive_news_terms"];
YAHOO.Shortcuts.doUlt =3D false;
YAHOO.Shortcuts.location =3D "us";
YAHOO.Shortcuts.document_id =3D 0;
YAHOO.Shortcuts.document_type =3D "";
YAHOO.Shortcuts.document_title =3D "WellsFargo Account Security Measures No=
tification [Wednesday, November 05, 2008 23:26:18 PST -0400 UTC]";
YAHOO.Shortcuts.document_publish_date =3D "";
YAHOO.Shortcuts.document_author =3D "wellsfargo@wellsconnect.wellsfargo.com=
";
YAHOO.Shortcuts.document_url =3D "";
YAHOO.Shortcuts.document_tags =3D "";
YAHOO.Shortcuts.document_language =3D "english";
YAHOO.Shortcuts.annotationSet =3D {
"lw_1226067840_0": {
"text": "Wells Fargo",
"extended": 0,
"startchar": 1114,
"endchar": 1124,
"start": 1114,
"end": 1124,
"extendedFrom": "",
"predictedCategory": "",
"predictionProbability": "0",
"weight": 0.349024,
"relScore": 4.30353,
"type": ["shortcuts:/us/tag/other/wiki"],
"category": ["WIKI"],
"wikiId": "Wells_Fargo",
"relatedWikiIds": ["Bank_of_America", "Caterpillar_%28company%29", "Citigro=
up", "Countrywide_Financial", "EMC_Corporation", "JPMorgan_Chase", "New_Yor=
k_Stock_Exchange", "Pulte_Homes", "Wachovia", "Washington_Mutual"],
"relatedEntities": ["bank of america", "bank of america corp", "citigroup",=
"countrywide financial", "emc corp", "jpmorgan chase & co", "nyse", "pulte=
homes", "washington mutual", "wells fargo & co"],
"showOnClick": [],
"context": "your payment and personal information in order to protect your =
Wells Fargo account against unauthorized transactions. Please send a f=
ax with the",
"metaData": {
"visible": "false"
}
},
"lw_1226067840_1": {
"text": "1-609-228-5841",
"extended": 0,
"startchar": 1386,
"endchar": 1399,
"start": 1386,
"end": 1399,
"extendedFrom": "",
"predictedCategory": "",
"predictionProbability": "0",
"weight": 1,
"relScore": 0,
"type": ["shortcuts:/us/instance/identifier/phone_number/us"],
"category": ["IDENTIFIER"],
"wikiId": "",
"relatedWikiIds": [],
"relatedEntities": [],
"showOnClick": [],
"context": "24 hours your account will be temporary suspended. Fax num=
ber: 1-609-228-5841 BILLING ADRESS: -First name : -Last name : =
-SSN : -Adress : -City : -Zipcode",
"metaData": {
"visible": "true"
}
},
"lw_1226067840_2": {
"text": "E-mail address",
"extended": 0,
"startchar": 1551,
"endchar": 1564,
"start": 1551,
"end": 1564,
"extendedFrom": "",
"predictedCategory": "",
"predictionProbability": "0",
"weight": 0.233122,
"relScore": 5.39224,
"type": ["shortcuts:/us/tag/other/wiki"],
"category": ["WIKI"],
"wikiId": "E-mail_address",
"relatedWikiIds": [],
"relatedEntities": [],
"showOnClick": [],
"context": "First name : -Last name : -SSN : -Adress : -City : -Zipco=
de : -Phone number : -E-mail address : Account Information: -Cred=
it/Debit card number(16 digits numbers of your card",
"metaData": {
"visible": "false"
}
},
"lw_1226067840_3": {
"text": "Wells Fargo Online",
"extended": 0,
"startchar": 1913,
"endchar": 1935,
"start": 1913,
"end": 1935,
"extendedFrom": "Wells Fargo",
"predictedCategory": "",
"predictionProbability": "0",
"weight": 0.798039,
"relScore": 10.045,
"type": ["shortcuts:/concept"],
"category": ["CONCEPT"],
"wikiId": "",
"relatedWikiIds": [],
"relatedEntities": [],
"showOnClick": [],
"context": "verification): For your security we deactivated your card =
account. Sincerely, Wells Fargo Online Customer Service Protect y=
ourself from fraud and identity theft. To",
"metaData": {
"visible": "true"
}
},
"lw_1226067840_4": {
"text": "identity theft",
"extended": 0,
"startchar": 2053,
"endchar": 2067,
"start": 2053,
"end": 2067,
"extendedFrom": "",
"predictedCategory": "",
"predictionProbability": "0",
"weight": 0.340548,
"relScore": 8.01525,
"type": ["shortcuts:/concept"],
"category": ["CONCEPT"],
"wikiId": "Identity_theft",
"relatedWikiIds": ["Bank_of_America", "Consumer", "Credit_card", "Credit_ca=
rd_fraud", "Equifax", "Experian", "Fair_and_Accurate_Credit_Transactions_Ac=
t", "Federal_Trade_Commission", "Technology", "Utica,_New_York"],
"relatedEntities": [],
"showOnClick": [],
"context": "Wells Fargo Online Customer Service Protect yourself from =
fraud and identity theft. To learn more, go to http://wellsfargo.com/priv=
acy_security/fraud_prevention/ If you have a",
"metaData": {
"visible": "false"
}
},
"lw_1226067840_5": {
"text": "http://wellsfargo.com/privacy_security/fraud_prevention/",
"extended": 0,
"startchar": 2196,
"endchar": 2251,
"start": 2196,
"end": 2251,
"extendedFrom": "",
"predictedCategory": "",
"predictionProbability": "0",
"weight": 1,
"relScore": 0,
"type": ["shortcuts:/us/instance/identifier/hyperlink/http"],
"category": ["IDENTIFIER"],
"wikiId": "",
"relatedWikiIds": [],
"relatedEntities": [],
"showOnClick": [],
"context": "",
"metaData": {
"linkHref": " http://wellsfargo.com/privacy_security/fraud_prevention",
"linkProtocol": "http",
"linkRel": "nofollow",
"linkTarget": "_blank",
"visible": "true"
}
},
"lw_1226067840_6": {
"text": "wellsfargo.com",
"extended": 0,
"startchar": 2366,
"endchar": 2379,
"start": 2366,
"end": 2379,
"extendedFrom": "",
"predictedCategory": "",
"predictionProbability": "0",
"weight": 1,
"relScore": 0,
"type": ["shortcuts:/us/place/virtual/web_site"],
"category": ["IDENTIFIER"],
"wikiId": "",
"relatedWikiIds": [],
"relatedEntities": [],
"showOnClick": [],
"context": "please sign on to your secure online banking session at wellsfa=
rgo.com, click the Sign On button and then select \u0022Contact Us",
"metaData": {
"visible": "true"
}
},
"lw_1226067840_7": {
"text": "Contact",
"extended": 0,
"startchar": 2431,
"endchar": 2437,
"start": 2431,
"end": 2437,
"extendedFrom": "",
"predictedCategory": "",
"predictionProbability": "0",
"weight": 0.501659,
"relScore": 3.54331,
"type": ["shortcuts:/concept"],
"category": ["CONCEPT"],
"wikiId": "",
"relatedWikiIds": [],
"relatedEntities": [],
"showOnClick": [],
"context": "at wellsfargo.com, click the Sign On button and then select \u0=
022Contact Us",
"metaData": {
"visible": "false"
}
}
};
YAHOO.Shortcuts.headerID =3D "b567f37247f1db105151eacc82539208";











Dear Customer:=20


As part of our security measures, we regularly screen activity in the credi=
t and debit cards system. During a recent screening, we noticed an issue re=
garding your account. Your account may have been accessed by an unauthorize=
d third party.
As a precaution, we are requesting additional verification of your payment =
and personal information in order to protect your Wells Fargo account again=
st unauthorized transactions.


Please send a fax with the following informations to remove any holds on th=
is account. If we will not recive your fax within 24 hours your account wil=
l be temporary suspended.


Fax number: 1-609-228-5841=20


BILLING ADRESS:

-First name :
-Last name :=20
-SSN :
-Adress :
-City :
-Zipcode :
-Phone number :
-E-mail address :


Account Information:

-Credit/Debit card number(16 digits numbers of your card):
-Expiration Date :
-Code Verification number(3 digits number of the back of your card):
-ATM PIN ( for bank customer verification):


For your security we deactivated your card account.

Sincerely,=20
Wells Fargo=20
Online Customer Service=20


Protect yourself from fraud and identity theft. To learn more, go to=20
http://wellsfargo.com/privacy_security/fraud_prevention/

If you have a question about your account, please sign on to your secure on=
line banking session at wellsfargo.com, click the Sign On button and then s=
elect "Contact Us." =0A=0A=0A

Anti-fraud resources: