joewein.de LLC fighting spam and scams on the Internet

Try our spam filter! Free trial for 30 days

"419" Scam – Advance Fee / Fake Lottery Scam

• About the 419 (Advance Fee) scam
• "Is that email a scam?" - Check it online here!
  
• Frequently asked Questions (419 FAQ)
• Phone numbers used by 419 scammers
  (+225 +229 +234 +27 +31 +32 +34 +44 other)
• Company names mentioned in 419 spam:
  1 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z
• Support our efforts to stop scams!
  
• How to report 419 spam to us
• What can you do when you receive 419 spam
  
  
• Spam archive, Daily index
  

Victims never receive this non-existent fortune but are tricked into sending their money to the criminals, who remain anonymous. They hide their real identity and location by using fake names and fake postal addresses as well as communicating via anonymous free email accounts and mobile phones.

Read more about such scams here or in our 419 FAQ. Use the Scam-O-Matic to verify suspect emails.

Click here to report a problem with this page.

Some comments by the Scam-O-Matic about the following email:

• The following phrases in this message should put you on alert:
  • "cheque " (Beware of any scheme that involves cashing checks or money orders and then wiring a portion of the funds somewhere - you'll be liable for the entire amount if the checks or money orders turn out to be fake, even after you have received and forwarded cash. If it's a lottery prize, remember that real lotteries do not pay large prizes by check. They wire the money directly to your bank account and you do not pay for that. Many scammers promise a large check only in order to then demand payment of courier fees for a fake courier service. )
• This email message is a 419 scam. Please see our 419 FAQ for more details on such scams.
  

Fraud email example:

From: "JOHN MARTINS"<robert.c1@optusnet.com.au>
Date: Wed, 25 Feb 2009 12:03:32 -0600
Subject: *****SPAM***** Attn: Friend


Spam detection software, running on the system "spam1.pem.inap.sea.dotster.net", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Attn: Friend. How are you today? Hope all is well with you
and your family? I hope this mail meets you in a perfect condition. I am
using this opportunity to thank you for your great effort to our unfinished
transfer of funds your account due to one Reason or the other best known
to you. But I want to inform you that I have successfully transferred the
Cheque out of the company to someone else who was Capable of assisting me
in this great venture. [...]

Content analysis details: (7.6 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
1.6 MISSING_HEADERS Missing To: header
1.8 MILLION_USD BODY: Talks about millions of dollars
1.2 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.7 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
2.0 ADVANCE_FEE_2 Appears to be advance fee fraud (Nigerian 419)
0.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

Anti-fraud resources:

• What can you do when you receive 419 spam