|
|
joewein.de LLC
fighting spam and scams on the Internet
|
|
"419" Scam – Advance Fee / Fake Lottery Scam
The so-called "419" scam is a type of fraud dominated by criminals from Nigeria and other countries in Africa. Victims of the scam are promised a large amount of money, such as a lottery prize, inheritance, money sitting in some bank account, etc.
Victims never receive this non-existent fortune but are tricked into sending their money to the criminals, who remain anonymous. They hide their real identity and location by using fake names and fake postal addresses as well as communicating via anonymous free email accounts and mobile phones.
Keep in mind that scammers DO NOT use their real names when defrauding people.
The criminals either abuse names of real people or companies or invent names or addresses.
Any real people or companies mentioned below have NO CONNECTION to the scammers!
Read more about such scams here or in our 419 FAQ. Use the Scam-O-Matic to verify suspect emails.
Click here to report a problem with this page.
Some comments by the Scam-O-Matic about the following email:
- This email uses a separate reply address that is different from the sender address. Spammers use this to get replies even when the original spam sending accounts have been shut down. Also, sometimes the sender addresses are legitimate looking but fake and only the reply address is actually an email account controlled by the scammers.
- This email message is a 419 scam. Please see our 419 FAQ for more details on such scams.
Fraud email example:
From: "Stan Leed" (may be fake)
Reply-To: <leedsstan@gmail.com>
Date: Thu, 9 Aug 2018 20:25:50 +0300
Subject: Re : COOPERATION NEEDED
*****************************************************************
********************** SPAM REPORT MESSAGE **********************
*****************************************************************
Datagate AntiSPAM detection software has identified this incoming
email as possible spam. The original message report has been
attached to this so you can view it (if it isn't spam) or block
similar future email. If you have any questions, please contact
Datagate PostMaster <antispam@postmaster.datagate.net.uk>.
Content preview: Hello Friend, I got your contact from the online business
directory and I have a proposition that I think will be of interest to you.
I am a broker linked with high profile investors who are seeking means of
expanding their investment portfolio globally and are interested in investing
in your country. To this end, we seek to know the possibility of going into
partnership discussion with you within your present scope of business. Should
you be interested to engage us for a more detailed discussion on the aforementioned
proposal, we would be happy to do so in whatever medium you find much more
appropriate for this engagement. [...]
Content analysis details: (8.6 points, 4.9 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FSL_HELO_NON_FQDN_1 FSL_HELO_NON_FQDN_1
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom&id=agva%40veloxmail.com.br&ip=78.189.161.248&r=uxshared4.datagate.net.uk]
1.2 DATE_IN_FUTURE_24_48 Date: is 24 to 48 hours after Received: date
0.4 RDNS_DYNAMIC Delivered to internal network by host with
dynamic-looking rDNS
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
1.0 FROM_MISSP_SPF_FAIL FROM_MISSP_SPF_FAIL
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
0.0 MIMEOLE_DIRECT_TO_MX MIMEOLE + direct-to-MX
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.2 XPRIO Has X-Priority header
Datagate AntiSPAM Service <antispam@postmaster.datagate.net.uk>
---------------------------------------------------------------
|
Anti-fraud resources:
