joewein.de LLC fighting spam and scams on the Internet

Try our spam filter! Free trial for 30 days

"419" Scam – Advance Fee / Fake Lottery Scam

• About the 419 (Advance Fee) scam
• "Is that email a scam?" - Check it online here!
  
• Frequently asked Questions (419 FAQ)
• Phone numbers used by 419 scammers
  (+225 +229 +234 +27 +31 +32 +34 +44 other)
• Company names mentioned in 419 spam:
  1 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
• Support our efforts to stop scams!
  
• How to report 419 spam to us
• What can you do when you receive 419 spam
  
  
• Spam archive, Daily index
  

Victims never receive this non-existent fortune but are tricked into sending their money to the criminals, who remain anonymous. They hide their real identity and location by using fake names and fake postal addresses as well as communicating via anonymous free email accounts and mobile phones.

Read more about such scams here or in our 419 FAQ. Use the Scam-O-Matic to verify suspect emails.

Click here to report a problem with this page.

Some comments by the Scam-O-Matic about the following email:

• An email address listed inside this email has been used in a known fraud before.
• This email message is a 419 scam. Please see our 419 FAQ for more details on such scams.
  
• This email lists free webmail addresses. Use of such addresses is typical for scams. Lotteries, banks and any but the smallest of companies do not normally use such addresses. Criminals use them to anonymously send and receive email at Internet cafes.
  • infoasesorisnet@aim.com (email address has been used in a known fraud before)
  • asesorisnet@gmail.com

Fraud email example:

From: EUROMILLIONS INTERNATIONAL <euromillions_award@yahoo.es>
Date: Wed, 21 Nov 2007 12:21:29 +0100
Subject: ****** SPAM ****** CONGRATULATIONS!!!


Spam detection software, running on the system "henribok.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: EURO MILLIONS AWARD/PROMOTIONAL DEPARTMENT MADRID.SPAIN. Email:
infoasesorisnet@aim.com Email:asesorisnet@gmail.com EMAIL-LOTTERY AWARD PROMOTIONAL
PROGRAMME We are pleased to inform you that your EMAIL ADDRESS has been selected
as one of the 10 lucky winners in the email lottery programme conducted by
the EURO MILLIONS on the 09th of november, 2007. [...]

Content analysis details: (8.7 points, 4.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.0 MISSING_MID Missing Message-Id: header
0.8 MIME_BOUND_MANY_HEX Spam tool pattern in MIME boundary
0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
[83.61.182.57 listed in dnsbl.sorbs.net]
0.9 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[83.61.182.57 listed in zen.spamhaus.org]
0.0 DK_POLICY_SIGNSOME Domain Keys: policy says domain signs some mails
0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.5000]
1.4 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
above 50%
[cf: 100]
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.2 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
0.0 DIGEST_MULTIPLE Message hits more than one network digest check

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

Anti-fraud resources:

• What can you do when you receive 419 spam