joewein.net   joewein.de LLC
fighting spam and scams on the Internet
Try our spam filter!
 Free trial for 30 days
   jwSpamSpy
Home
About Us
Spam
419/Nigeria
Fraud
Contact

"419" Scam – Advance Fee / Fake Lottery Scam

The so-called "419" scam is a type of fraud dominated by criminals from Nigeria and other countries in Africa. Victims of the scam are promised a large amount of money, such as a lottery prize, inheritance, money sitting in some bank account, etc.

Victims never receive this non-existent fortune but are tricked into sending their money to the criminals, who remain anonymous. They hide their real identity and location by using fake names and fake postal addresses as well as communicating via anonymous free email accounts and mobile phones.

Keep in mind that scammers DO NOT use their real names when defrauding people.
The criminals either abuse names of real people or companies or invent names or addresses.
Any real people or companies mentioned below have NO CONNECTION to the scammers!

Read more about such scams here or in our 419 FAQ. Use the Scam-O-Matic to verify suspect emails.

Click here to report a problem with this page.

 

 

Some comments by the Scam-O-Matic about the following email:

Fraud email example:

From: "Caro Johnson"<test@bradhuff.com>
Date: Thu, 16 Apr 2015 10:34:19 -0000
Subject: *****SPAM***** PLEASE READ MESSAGE UNDER AND REPLY


O filtro de spam do servidor "odin.odin-levitron.com.br" identificou este
e-mail como um spam. A mensagem original está anexa a este
este e-mail para que possa ser visualizada (caso não seja
um spam) ou para que emails futuros similares a este sejam
marcados como spam também. Caso tenha alguma dúvida, entre
em contato no email the administrator of that system para mais detalhes.

Visualização de um trecho: Greetings, I am Mrs. Caro Johnson from Northern Ireland currently
undergoing medical treatment here, I am a 62 yrs old sick widow, Diagnosed
with cancer. I have no children that will take care of me and since the doctors
have confirmed that I have a very short time to live as the cancer HAS BEEN
bad since the last two years now. [...]

Detalhes da análise: (36.2 pontos, mínimo de 3.0)

pts regra descrição
---- ---------------------- --------------------------------------------------
-1.0 ALL_TRUSTED Mensagem passou via SMTP apenas por hosts confiáveis
3.5 BAYES_99 BODY: Probabilidade de ser spam entre 99 to 100%
[score: 1.0000]
1.6 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
3.3 NSL_RCVD_FROM_USER Received from User
1.5 SUBJ_ALL_CAPS Assunto é composto apenas por letras maiúsculas
1.0 MISSING_HEADERS Não possui o cabeçalho To:
3.2 MILLION_USD BODY: Fala sobre milhões de dólares
0.2 BAYES_999 BODY: Probabilidade de ser spam entre 99.9 to 100%
[score: 1.0000]
0.5 MISSING_MID Não possui header Message-Id
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
2.6 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.4 FSL_NEW_HELO_USER Spam's using Helo and User
3.1 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.7 FROM_MISSP_USER From misspaced, from "User"
0.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
0.0 FROM_MISSPACED From: missing whitespace
0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
1.9 FORGED_MUA_OUTLOOK Email fingindo ser enviado pelo MS Outlook
1.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.8 MONEY_FRAUD_3 Lots of money and several fraud phrases
2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money



Anti-fraud resources: