419 scam: Tim White <phantom421366@yahoo.com> CIA GENERATED BOGUS "WINNER" SCAM

joewein.de LLC
fighting spam and scams on the Internet

Try our spam filter!
Free trial for 30 days

Home

About Us

Spam

419/Nigeria

Fraud

Contact

"419" Scam – Advance Fee / Fake Lottery Scam

The so-called "419" scam is a type of fraud dominated by criminals from Nigeria and other countries in Africa. Victims of the scam are promised a large amount of money, such as a lottery prize, inheritance, money sitting in some bank account, etc.

Victims never receive this non-existent fortune but are tricked into sending their money to the criminals, who remain anonymous. They hide their real identity and location by using fake names and fake postal addresses as well as communicating via anonymous free email accounts and mobile phones.

Keep in mind that scammers DO NOT use their real names when defrauding people.
The criminals either abuse names of real people or companies or invent names or addresses.
Any real people or companies mentioned below have NO CONNECTION to the scammers!

Read more about such scams here or in our 419 FAQ. Use the Scam-O-Matic to verify suspect emails.

Click here to report a problem with this page.

Some comments by the Scam-O-Matic about the following email:

The following phrases in this message should put you on alert:
- ",000,000" (they want you to be blinded by the prospect of quick money, but the only money that ever changes hands in 419 scams is from you to the criminals)
This email message is a 419 scam. Please see our 419 FAQ for more details on such scams.
This email lists mobile phone numbers. Use of such numbers is typical for scams because they allow criminals to conceal their true location. They can receive calls in an Internet cafe from where they send you emails, while pretending to be in some office.
- +447031931551 (UK, redirects to a mobile phone in another country)
This email lists free webmail addresses. Use of such addresses is typical for scams. Lotteries, banks and any but the smallest of companies do not normally use such addresses. Criminals use them to anonymously send and receive email at Internet cafes.
- sonyericssonclaims@googlemail.com

Fraud email example:

From: (sent from abused email account)
Date: Wed, 5 Nov 2008 20:57:21 -0800 (PST)
Subject: CIA GENERATED BOGUS "WINNER" SCAM

REPLY ASAP
Wednesday, November 5, 2008 9:35 PM

>From s.ericsson@cox.net Wed Nov 5 20:35:51 2008

Return-Path:=20

<s.ericsson@cox.net>=20

Authentication-Results:=20

mta196.mail.re4.yahoo.com from=3Dcox.net; domainkeys=3Dneutral (no sig)=20

Received:=20

from 68.230.240.47 (EHLO eastrmmtao105.cox.net) (68.230.240.47) by mta196.m=
ail.re4.yahoo.com with SMTP; Wed, 05 Nov 2008 20:35:51 -0800=20

Received:=20

from eastrmimpo02.cox.net ([68.1.16.120]) by eastrmmtao105.cox.net (InterMa=
il vM.7.08.02.01 201-2186-121-102-20070209) with ESMTP id <20081106043551.K=
JNB23768.eastrmmtao105.cox.net@eastrmimpo02.cox.net>; Wed, 5 Nov 2008 23:35=
:51 -0500=20

Received:=20

from eastrmwml33 ([172.18.18.217]) by eastrmimpo02.cox.net with bizsmtp id =
bgbq1a00A4h0NJL02gbqdv; Wed, 05 Nov 2008 23:35:50 -0500 a=3DOWyB6QUpKIs6Pc+=
dTZg93Q=3D=3D:17 a=3Dik_6t8rh_DWSMSjcGpkA:9 a=3DeI7e0Kq_IP0b_ebf0dtBZrW-yA0=
A:4 a=3D9xyTavCNlvEA:10 a=3Dh9s5Ru71U4oA:10=20

Received:=20

from 212.100.250.225 by webmail.east.cox.net; Wed, 5 Nov 2008 23:35:50 -050=
0=20

Message-ID:=20

<20081105233551.ND4P5.175742.imail@eastrmwml33>=20

Date:=20

Wed, 5 Nov 2008 23:35:51 -0500=20

From:=20

<s.ericsson@cox.net>=A0=A0Add sender to Contacts=20

Reply-To:=20

sonyericsson_dept@live.com=20

Subject:=20

REPLY ASAP=20

MIME-Version:=20

1.0=20

Content-Type:=20

text/plain; charset=3Dutf-8=20

Content-Transfer-Encoding:=20

7bit=20

Sensitivity:=20

Normal=20

Content-Length:=20

334=20
Compact Headers

if (typeof YAHOO =3D=3D "undefined") {
var YAHOO =3D {};
}
YAHOO.Shortcuts =3D YAHOO.Shortcuts || {};
YAHOO.Shortcuts.hasSensitiveText =3D false;
YAHOO.Shortcuts.sensitivityType =3D [];
YAHOO.Shortcuts.doUlt =3D false;
YAHOO.Shortcuts.location =3D "us";
YAHOO.Shortcuts.document_id =3D 0;
YAHOO.Shortcuts.document_type =3D "";
YAHOO.Shortcuts.document_title =3D "REPLY ASAP";
YAHOO.Shortcuts.document_publish_date =3D "";
YAHOO.Shortcuts.document_author =3D "s.ericsson@cox.net";
YAHOO.Shortcuts.document_url =3D "";
YAHOO.Shortcuts.document_tags =3D "";
YAHOO.Shortcuts.document_language =3D "english";
YAHOO.Shortcuts.annotationSet =3D {
"lw_1225947340_0": {
"text": "Mr. David Moore",
"extended": 1,
"startchar": 210,
"endchar": 224,
"start": 210,
"end": 224,
"extendedFrom": "David Moore",
"predictedCategory": "",
"predictionProbability": "0",
"weight": 0.462904,
"relScore": 10.3731,
"type": ["shortcuts:/us/tag/other/wiki"],
"category": ["WIKI"],
"wikiId": "David_Moore",
"relatedWikiIds": [],
"relatedEntities": [],
"showOnClick": [],
"context": "SONY ERICSSON PROMOTION organized in=A0=A0UNITED KINGDOM. For c=
laims contact;=A0=A0Mr. David Moore E-mail: sonyericssonclaims@googlemail.c=
om TELEPHONE: +44-703-193-1551 Congratulations, Mrs Diana Hall Online Co-or=
dinator",
"metaData": {
"visible": "false"
}
},
"lw_1225947340_1": {
"text": "sonyericssonclaims@googlemail.com",
"extended": 0,
"startchar": 339,
"endchar": 371,
"start": 339,
"end": 371,
"extendedFrom": "",
"predictedCategory": "",
"predictionProbability": "0",
"weight": 1,
"relScore": 0,
"type": ["shortcuts:/us/instance/identifier/hyperlink/mailto"],
"category": ["IDENTIFIER"],
"wikiId": "",
"relatedWikiIds": [],
"relatedEntities": [],
"showOnClick": [],
"context": "in=A0=A0UNITED KINGDOM. For claims contact;=A0=A0Mr. David Moor=
e E-mail: sonyericssonclaims@googlemail.com TELEPHONE: +44-703-193-1551 Con=
gratulations, Mrs Diana Hall Online Co-ordinator",
"metaData": {
"linkHref": "mailto:sonyericssonclaims@googlemail.com",
"linkProtocol": "mailto",
"linkYmailto": "mailto:sonyericssonclaims@googlemail.com",
"visible": "true"
}
},
"lw_1225947340_2": {
"text": "703-193-1551",
"extended": 0,
"startchar": 395,
"endchar": 406,
"start": 395,
"end": 406,
"extendedFrom": "",
"predictedCategory": "",
"predictionProbability": "0",
"weight": 1,
"relScore": 0,
"type": ["shortcuts:/us/instance/identifier/phone_number/us"],
"category": ["IDENTIFIER"],
"wikiId": "",
"relatedWikiIds": [],
"relatedEntities": [],
"showOnClick": [],
"context": "",
"metaData": {
"visible": "true"
}
}
};
YAHOO.Shortcuts.headerID =3D "a28c62e506b694997ee7d64c17c0edff";

Attn:Winner,
Your e-mail address has being approved a lump sum payment of 1,000,000 Euro=
s=20
having emerged winner in the SONY ERICSSON PROMOTION organized in=20
UNITED KINGDOM. For claims contact;

Mr. David Moore
E-mail: sonyericssonclaims@googlemail.com
TELEPHONE: +44-703-193-1551
Congratulations,
Mrs Diana Hall
Online Co-ordinator.
=0A=0A=0A

Anti-fraud resources:

What can you do when you receive 419 spam