joewein.net   joewein.de LLC
fighting spam and scams on the Internet
Try our spam filter!
Free trial for 30 days
  jwSpamSpy

Home
About Us
Spam
419/Nigeria
Fraud
Contact

"419" Scam – Advance Fee / Fake Lottery Scam

The so-called "419" scam is a type of fraud dominated by criminals from Nigeria and other countries in Africa. Victims of the scam are promised a large amount of money, such as a lottery prize, inheritance, money sitting in some bank account, etc.

Victims never receive this non-existent fortune but are tricked into sending their money to the criminals, who remain anonymous. They hide their real identity and location by using fake names and fake postal addresses as well as communicating via anonymous free email accounts and mobile phones.

Keep in mind that scammers DO NOT use their real names when defrauding people.
The criminals either abuse names of real people or companies or invent names or addresses.
Any real people or companies mentioned below have NO CONNECTION to the scammers!

Read more about such scams here or in our 419 FAQ. Use the Scam-O-Matic to verify suspect emails.

Click here to report a problem with this page.

 

 

Some comments by the Scam-O-Matic about the following email:

Fraud email example:

From: "Brown Morgan"<ewapasieczna@wp.pl>
Date: Fri, 27 Jun 2014 12:15:14 -0700
Subject: Re:


------------------ Début de Rapport SpamAssassin ---------------------
Ce message est probablement du SPAM (message non sollicité envoyé en
masse, publicité, escroquerie...).

Cette notice a été ajoutée par le système d'analyse "SpamAssassin" sur
votre serveur de courrier "mail.nv1.fr", pour vous
aider à identifier ce type de messages.

Le système SpamAssassin ajoute un en-tête "X-Spam-Flag: YES" aux
messages qu'il considère comme étant probablement du Spam.
Vous pouvez si vous le souhaitez utiliser cette caractéristique
pour régler un filtre dans votre logiciel de lecture de courrier,
afin de détruire ou de classer à part ce type de message.

Si ce robot a classifié incorrectement un message qui vous était
destiné, ou pour toute question, veuillez contacter l'administrateur
du système par e-mail à the administrator of that system .

Voir http://spamassassin.apache.org/tag/ pour plus de détails (en anglais).

Détails de l'analyse du message: (57.2 points, 7.0 requis)
-1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
3.5 BAYES_99 BODY: L'algorithme Bayésien a évalué la probabilité de spam
entre 99 et 100%
[score: 1.0000]
4.5 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.7 NSL_RCVD_FROM_USER Received from User
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(ewapasieczna[at]wp.pl)
1.6 DATE_IN_PAST_03_06 Date: est 3 à 6 heures avant la date de l'en-tête
Received:
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(<morganbrown954[at]yahoo.com.hk>
)
0.2 BAYES_999 BODY: L'algorithme Bayésien a évalué la probabilité de spam
entre 99.9 et 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
4.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
2.8 FSL_NEW_HELO_USER FSL_NEW_HELO_USER
4.0 AXB_XMAILER_MIMEOLE_OL_024C2 AXB_XMAILER_MIMEOLE_OL_024C2
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
2.7 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
4.1 FSL_MISSP_REPLYTO Mis-spaced from and Reply-to
3.5 FROM_MISSP_USER From misspaced, from "User"
1.5 FAKE_REPLY_C FAKE_REPLY_C
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.0 FROM_MISSPACED From: missing whitespace
0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.9 FORGED_MUA_OUTLOOK Message falsifié prétendant provenir du logiciel
MS Outlook
4.1 FROM_MISSP_FREEMAIL From misspaced + freemail provider
4.1 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
4.4 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
2.3 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money

-------------------- Fin de Rapport SpamAssassin ---------------------



Anti-fraud resources: