joewein.de LLC fighting spam and scams on the Internet

Try our spam filter! Free trial for 30 days

"419" Scam – Advance Fee / Fake Lottery Scam

• About the 419 (Advance Fee) scam
• "Is that email a scam?" - Check it online here!
  
• Frequently asked Questions (419 FAQ)
• Phone numbers used by 419 scammers
  (+225 +229 +234 +27 +31 +32 +34 +44 other)
• Company names mentioned in 419 spam:
  1 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
• Support our efforts to stop scams!
  
• How to report 419 spam to us
• What can you do when you receive 419 spam
  
  
• Spam archive, Daily index
  

Victims never receive this non-existent fortune but are tricked into sending their money to the criminals, who remain anonymous. They hide their real identity and location by using fake names and fake postal addresses as well as communicating via anonymous free email accounts and mobile phones.

Read more about such scams here or in our 419 FAQ. Use the Scam-O-Matic to verify suspect emails.

Click here to report a problem with this page.

Some comments by the Scam-O-Matic about the following email:

• An email address listed inside this email has been used in a known fraud before.
• The following phrases in this message should put you on alert:
  • "cost of transfer" (this will cost you money - be careful with upfront payments to anyone you only know through email, especially if they promise you a lot of money. NEVER send money by Western Union or MoneyGram to people you do not know personally - NO EXCEPTIONS! Instant wire transfer services are not meant to be used with strangers because they offer no protection against fraud. That is precisely why the criminals want you send money that way. )
  • "into your nominated bank account" (they want you to be blinded by the prospect of quick money, but the only money that ever changes hands in 419 scams is from you to the criminals)
• This email message is a 419 scam. Please see our 419 FAQ for more details on such scams.
  
• This email lists free webmail addresses. Use of such addresses is typical for scams. Lotteries, banks and any but the smallest of companies do not normally use such addresses. Criminals use them to anonymously send and receive email at Internet cafes.
  • davidjohn112@gmail.com (email address has been used in a known fraud before)
  • fayadbolkiah112@hotmail.com

Fraud email example:

From: "Dr.David John"<davidjohn112@gmail.com>
Date: Thu, 9 Jul 2009 11:13:15 +0800
Subject: *****SPAM***** Obama Foundation


O software anti-spam, rodando no servidor "mail.acp",
identificou este e-mail como um possivel spam. A mensagem original
foi anexada a este para que voce possa ver (caso nao seja spam).
Caso tenha duvidas, favor entrar em contato com:
postmaster@soslack.com.br .

Content preview: Greetings to you, On behalf of the Obama's Foundation,
we wish to notify you as a beneficiary of $99,000.00 USD in
compensation of scam victims.Do contact Hlb Group Of Finance;
Malaysia's Branch for verification and release of your $99,000.00 USD
that we have deposited The account log on will be presented to you by
the bank in order to access the funds before releasing into your
nominated bank account. You will transfer the funds into your
nominated account on-line as the Hlb Bank, My will provide the
necessary information to you. We have taken care of the cost of
transfer (C.O.T) and the VAT. Please if you are willing to accept the
funds, do contact the Managing Director of the Hlb Bank, My with the
following details: You are to fill the appropriate form and submit to
the bank. [1] Full Names: [2] Contact address [3] Direct Telephone No:
|4| Occupation : [5] Age : {6} Marital Status: Managing Director of
the Hlb Bank, My Name: Dr Micheal Johnson Private Email:
info@hl-bmy.com Yours Faithfully, Ms Fayad Bolkiah Co-ordinator.
OBAMA'S FOUNDATION OBAMA'S FOUNDATION {COMPENSATION OF SCAMMED VICTIM/
$500,000 BENEFICIARIES}.REF/PAYMENTS CODE: ECB/06654 $500,000 USD.
Contact:Name: Dr David John / Ms Fayad Bolkiah Private Email:
davidjohn112@gmail.com, fayadbolkiah112@hotmail.com Telephone line:
+60172484454 [...]

Content analysis details: (12.9 points, 5.5 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.5 FROM_ENDS_IN_NUMS From: ends in numbers
1.3 UNDISC_RECIPS Valid-looking To "undisclosed-recipients"
1.8 MSGID_FROM_MTA_ID Message-Id for external message added locally
0.1 MAILTO_TO_SPAM_ADDR URI: Includes a link to a likely spammer email
1.5 BR_LINK_UNSAFE URI: Links para arquivos exe,pif,scr e outros
1.1 HTML_00_10 BODY: Message is 0% to 10% HTML
0.0 HTML_MESSAGE BODY: HTML included in message
1.6 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.5142]
1.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
0.1 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
3.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

Anti-fraud resources:

• What can you do when you receive 419 spam