Unfinished Transfer of Funds and Gratuity

Any information or research into the rampant "Nigerian Scam" messages.

Unfinished Transfer of Funds and Gratuity

Postby kabo0m » Mon Apr 26, 2010 7:02 pm

Advance Fee Fraud/419 type scam email:

Received: from mitracomm.com (mail.phintraco.co.id [202.169.38.132])
Reply-To: <barristefranksmith41 @ rogers.com>
From: "Senator Dan Scott" <senatordanscott @ hotmail.com>
Subject: This from the Regular Mail Service and Minister of Finance Nigeria
Date: Mon, 26 Apr 2010 14:02:33 -0700

Attention! Dear Sir/ Madam,

On behalf of the Minister of Finance and other private sectors here in Nigeria brings out this Regular Mail Service to deliver the Unfinished Transfer of Funds and Gratuity that is in the custody of different firms and companies to the rightful owner in any countries.

I am Senator Dan Scott in charge of this operation. The Minister of Finance has ordered the FedEx, DHL, UPS, First Bank, Zenith Bank and other firms to release the bank draft and ATM cards to the GPS (Regular Mail Service), So that they can be mailed out to the rightful owners, because there are too many complains coming to our desk from different customers and the {FGN} Federal Government of Nigeria that people are not getting their Instrument to cash their funds and gratuity, e.g. people are not getting their Bank Draft and ATM Cards due to the fact that people are not meeting up with the required demands and amount imposed by some of this delivery companies, firms and other sectors and constant require of fees that are too much for people to handle.

We have series of Bank Drafts and ATM Cards here in our custody and they are sealed and we don’t know who and where they belong to we are getting in touch with you to know if you have ever received an email regarding any Bank Draft and ATM Cards please contact us back as we have sent it to the GPS (Regular Mail Service) where it will be sent to you by.

REGULAR MAIL WITHOUT YOU PAYING ANY DELIVERY CHARGE OR INSURANCE FEE.

You are to contact the GPS (Regular Mail Service) for your funds immediately.Here is the contact email address

Full Names: - Barrister.Frank Smith
Valid Contact: - (barristefranksmith41 @ rogers.com)

==========================================================================================================

NOTE: DUE TO THE GREAT WORK THIS GOVERNMENT IS DOING TO HELP YOU GET YOUR FUNDS,IT IS MANDATORY THAT THE ONLY MONEY YOU WILL BE ASKED TO PAY WHEN YOU
CONTACT THE G.P.S IS $210 FOR ADMINISTRATIVE / ENDORSEMENT CHARGES ONLY AS JOINTLY APPROVED BY UNITED NATION AND WORLD BANK DELEGATES BEFORE THIS REIMBURSEMENT.

===========================================================================================================
================================================================================================
I await your urgent response while you fill the form below for a proper and mistake less delivery to you:

1.YOUR FULL NAME:.......
2.YOUR FULL ADDRESS:....
3.YOUR REACHABLE PHONE NUMBER:......
4.YOUR OCCUPATION:.........

You are to contact the GPS (Regular Mail Service) and ask them where you are to send the $210 DMINISTRATIVE / ENDORSEMENT CHARGES which belongs to the Government. Do get in touch for your delivery at ones.

Regards
Senator Dan Scott


**reported through KnujOn
User avatar
kabo0m
Spam Reporter
 
Posts: 154
Joined: Sun Mar 21, 2010 4:36 pm

Re: Unfinished Transfer of Funds and Gratuity

Postby kabo0m » Tue May 04, 2010 4:01 am

A different variant of it I just got tonight

Received: from ccsllc.net (ccsllc.net [216.117.132.155]) by mx.google.com with ESMTP
Received: from User [66.15.50.134] by ccsllc.net with ESMTP
Reply-To: <barrylinson@rogers.com>
From: "GLOBAL POSTAL SERVICE"<gps@yahoo.com>
Subject: NOTIFICATION OF PAYMENT VIA REGULAR MAIL SERVICE
Date: Mon, 3 May 2010 23:18:06 -0700

NOTIFICATION OF PAYMENT VIA REGULAR MAIL SERVICE

Attention! Attention!! Attention!!!

Dear Sir/ Madam,

On behalf of the Minister of Finance and other private sectors here in Nigeria brings out this Regular Mail Service to deliver the Unfinished Transfer of Funds and Gratuity that is in the custody of different firms and companies to the rightful owner in any countries. I am MR.BARRY LINSON in charge of this operation.

The Minister of Finance has ordered the FedEx, Dhl, Ups, First Bank, Zenith Bank and other firms to release the bank draft and Atm cards to the GPS (Regular Mail Service), So that they can be mailed out to the rightful owners, because there are too many complains coming to our desk from different customers and the {FGN} Federal Government of Nigeria that people are not getting their Instrument to cash their funds and gratuity, e.g people are not getting their Bank Draft and Atm Cards due to the fact that people are not meeting up with the required demands and amount imposed by some of this delivery companies, firms and other sectors and constant require of fees that are too much for people to handle.


We have series of Bank Drafts and Atm Cards here in our custody and they are sealed and we dont know who and where they belong to we are getting in touch with you to know if you have ever received an email regarding any Bank Draft and Atm Cards please contact us back as we have sent it to the GPS (Regular Mail Service).

You are to contact the GPS (Regular Mail Service) for your funds immediately.

Here is my contact Number and email address

Full Names: - MR.BARRY LINSON
Valid Contact: - ( barrylinson @ rogers.com )
Tel # +234-803-368-3656

==========================================================================================================
NOTE: DUE TO THE GREAT WORK THIS GOVERNMENT IS DOING TO HELP YOU GET YOUR FUNDS,IT IS MANDATORY THAT THE ONLY MONEY YOU WILL BE ASKED TO PAY WHEN YOU CONTACT THE G.P.S IS $210 FOR ADMINISTRATIVE / ENDORSEMENT CHARGES ONLY AS JOINTLY APPROVED BY UNITED NATION AND WORLD BANK DELEGATES BEFORE THIS REIMBURSEMENT.
===========================================================================================================
===========================================================================================================

You are to contact the GPS (Regular Mail Service) and ask them where you are to send the $210 DMINISTRATIVE / ENDORSEMENT CHARGES which belongs to the Government.Do get intouch for your delivery at ones.

Regards
MR.BARRY LINSON


**Reported through KnujOn
User avatar
kabo0m
Spam Reporter
 
Posts: 154
Joined: Sun Mar 21, 2010 4:36 pm

Re: Unfinished Transfer of Funds and Gratuity

Postby AlphaCentauri » Wed May 05, 2010 5:54 pm

kabo0m wrote:**Reported through KnujOn


AFAIK, Knujon hasn't taken on the Nigerian/money mule spams. They're like us in concentrating mainly on the spamvertised domains.

In an email like this, your reporting options are the ISP for the originating IP (that sent the email itself) and the ISPs for any email addresses one would use to contact the spammer.

You can report the originating IP (216.117.132.155) through Spamcop.net

Report barrylinson@rogers.com to rogers.com at http://www.rogers.com/web/content/contactus

gps@yahoo.com is very unlikely to be an address the spammer monitors, as it was probably given out the first day Yahoo was in business.

Telephone country code 234 is for Nigeria. Good luck with that one. There are a number of websites that will tell you which code goes for which country, such as http://www.countrycallingcodes.com/Reverse-Lookup.php
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Re: Unfinished Transfer of Funds and Gratuity

Postby kabo0m » Thu May 06, 2010 12:28 pm

Went to the complaint page at Rogers.com but looks like it is just for customers. I had already sent a complaint to this email address instead: http://www.abuse.net/lookup.phtml?domain=rogers.com

HAVE YOU SUBMITTED YOUR COMPLAINT CORRECTLY?

To process your complaint we require that you include the VIOLATING IP ADDRESS in the Subject line of your email. If you have not done so already, we recommend that you resubmit your email with the appropriate IP in the Subject field. This will prevent delay in processing your complaint

REQUIRED SUPPORTING INFORMATION (NO ATTACHMENTS):

Reporting SPAM (Unsolicited Commercial/Bulk Email)

Paste the full message header along with the body of the message
received within the context of your complaint in plain text only

Reporting security violations

Include the relevant log entries in plain text format only. Log
entries should contain a time stamp, source IP address, protocol
(TCP/UDP/ICMP) and any applicable ports involved.

Reporting USENET Violations

Ensure that you include the post in question (no attachments please!) with
the full message header along with a working link to the charter/FAQ of the
discussion group in question. .

This Email address is used for reporting violations of the Rogers End User
Agreement committed by a Rogers Hi Speed Internet customer.

Abuse originating from outside the Rogers network should be reported to the
appropriate domain administrator from the domain of the offending IP
address.

Due to the volume of Email received by the Rogers Network Security
Department, we are unable to respond to each Email message individually
particularly if a large group of Rogers subscribers have been impacted.

Please be assured that your concern is being addressed.

For your convenience, we have posted current security-related issues on the
Rogers Customer Support Website. You can check to see if your particular
concern has been addressed by visiting:

http://www.rogershelp.com/help/content/ ... _security/
That link at the bottom doesn't work for me...

I am not in the Roger's Network Area though as far as I know...

I was also looking at this: http://banspam.javawoman.com/report3.html#scam1

Also I wasn't sure which IP to complain to Spamcop so thanks for clarifying that for me. I have now submitted it to Spamcop but had already deleted the spam after reporting it because I thought KnujOn accepted all spam. I don't know if Spamcop will accept it as it is posted in this thread.. I had trouble with Spamcop and don't know what I am doing wrong. Says
"SpamCop encountered errors while saving spam for processing:
SpamCop could not find your spam message in this email:"

when I sent it.

Looks like the same email used in March:
http://www.419scam.org/emails/2010-03/10/01022328.9.htm
User avatar
kabo0m
Spam Reporter
 
Posts: 154
Joined: Sun Mar 21, 2010 4:36 pm

Re: Unfinished Transfer of Funds and Gratuity

Postby AlphaCentauri » Thu May 06, 2010 7:19 pm

You may not be able to just forward spam to Spamcop. The format won't always be right. You should check their information here:
http://www.spamcop.net/fom-serve/cache/285.html
that goes into specifics for various mail clients.

If forwarding isn't working for you, you can paste the entire spam with headers in their webform, use MailwasherPro, or get the Thunderbird Spamcop reporting addon. There is no way to do it from Outlook as far as I know -- you can't even copy and paste. Outlook re-arranges the headers so their parser can't tell which ones are the real source of the spam.
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Re: Unfinished Transfer of Funds and Gratuity

Postby kabo0m » Fri May 07, 2010 4:44 am

AlphaCentauri wrote:You may not be able to just forward spam to Spamcop. The format won't always be right. You should check their information here:
http://www.spamcop.net/fom-serve/cache/285.html
that goes into specifics for various mail clients.

If forwarding isn't working for you, you can paste the entire spam with headers in their webform, use MailwasherPro, or get the Thunderbird Spamcop reporting addon. There is no way to do it from Outlook as far as I know -- you can't even copy and paste. Outlook re-arranges the headers so their parser can't tell which ones are the real source of the spam.


I read the link but it wasn't that helpful.

It said if there is a problem them the response I get in email should tell me what the problem was (since I already do have an email with them to forward to Spamcop) but the error I got was not helpful to me.

SpamCop encountered errors while saving spam for processing:
SpamCop could not find your spam message in this email:

and then it just showed me back the email I sent.

I guess I will try again ... perhaps the whole header didn't get sent.. who knows.
User avatar
kabo0m
Spam Reporter
 
Posts: 154
Joined: Sun Mar 21, 2010 4:36 pm

Re: Unfinished Transfer of Funds and Gratuity

Postby AlphaCentauri » Fri May 07, 2010 7:29 am

I just noticed they have changed their web form to request the headers and body be pasted into separate windows (a pain!) so perhaps they have changed their parser and are running into hiccups. The parser previously rejected anything with "headers in the body" (like those fake bounces that are sent with made-up headers included in the body), so they are perhaps trying to get around that limitation by allowing people to specify which are real headers and which are fake.
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Re: Unfinished Transfer of Funds and Gratuity

Postby ahoier » Wed May 12, 2010 4:58 pm

I think the "seperate forms" feature is for those users, or mail clients who don't make a good distinguish between the "header" and the "body" - so if you have one of those finnicky mail clients, yea, you gotta seperate them :)
ahoier
Spammer Killing Machine
 
Posts: 593
Joined: Thu Apr 03, 2008 4:33 pm
Location: Florida

Re: Unfinished Transfer of Funds and Gratuity

Postby AlphaCentauri » Thu May 13, 2010 12:00 am

A few hours after I got the separate entry form, it gave me the option of using the single window and has defaulted to that since I made the choice.
User avatar
AlphaCentauri
You are kiillllling-a my bizinisss!
 
Posts: 5989
Joined: Thu Mar 01, 2007 3:01 am

Re: Unfinished Transfer of Funds and Gratuity

Postby kabo0m » Sat Feb 26, 2011 11:34 am

Been awhile

Subject: Contact FEDEX Courier
From : "(UNDP) World Bank Programme" <info@untied.co.uk>
Date : Sat, 26 Feb 2011 13:00:01 +0000

Dear Beneficary,

This is to bring to your notice that a bank draft of $950,000.00 USD (Nine
Hundred And Fifty Thousand United State Dollars), has been Issued to you and
deposited with FedEx Courier For Delivery (UK, United Kingdom) The WORLD BANK
in conjunction with (UNDP) United Nations Development Programme in United
Kingdom has chosen you by the board of trustees as one of the final recipients
of a Cash Grant/Donation $950,000.00 USD,for your own personal, educational,
and business development, This Funds is a donation to you from the U.N through
e-mails balloting in affiliation with commonwealth poverty eradication program
to assist the poor. I do hope you receive this mail and act fast. the VAT &
Shipping charges as well as Insurance fees have been paid by (UN) United
Nations.

Note that the payment that is made on the Insurance, Premium & Clearance
Certificates, are to certify that the Bank Draft is not a Drug Affiliated Fund
(DAF) neither is it funds to sponsor Terrorism in your country. The only money
you are to pay to FedEx Dispatch Director, is the Demurrage Charges, which is
$180 USD only. You are to reconfirm your Name, postal address(s) and direct
phone number to FedEx Courier for delivery of your Bank Draft. The Parcel Reg.
No. is UK/R344/64072

FEDEX COURIER SERVICE CONTACT DETAILS
Contact (DISPATCH DIRECTOR)
Contact Person: Mr. Harry Heck
Telephone:+(44) 704-576-9104
Email : dispatchdirector@fedexcourier.co.uk
Email: fedexdispatchdirector@hotmail.co.uk

Full Names : ...............
Postal Address : ..........
Direct Telephone : ........
Country : ..................

Complete the above form and submit it to the (DISPATCHDIRECTOR) via email :
fedexdispatchdirector@hotmail.co.uk As soon as your details are received,
FedEx delivery team will send to you the neccessary payment procedure so that
you can effect the payment for the Demurrage Charges, which is $180 USD only.
Once they confirm the receipt of payment of 180 USD, they will not hesitate to
dispatch your package as well as the attahced letter to your residence. It
usually takes 48 hours being (2) Two days delivery service.

Also note that if payment is not made delivery of the parcel will not proceed
and also be informed that no cash on delivery is cash before delivery.

Yours Faithfully,
Kathryn Wayne.
Online (UNDP) United Nations
Development Programme Co-ordinator


Code: Select all
SMTP headers :
IP:203.162.44.70
EHLO server04.hcmuns.edu.vn
MAIL FROM:<info@untied.co.uk>
RCPT TO: *me*

MIME headers :
Received: from Server2.hcmus.edu.vn (Server2.hcmuns.edu.vn [172.29.2.2])
by server04.hcmuns.edu.vn (Postfix) with ESMTPS id A14D45C842;
Sat, 26 Feb 2011 19:59:53 +0700 (ICT)
Received: from t3h.hcmuns.edu.vn (t3h.hcmuns.edu.vn [172.29.14.3] (may be forged))
by Server2.hcmus.edu.vn (8.13.6/8.13.7) with ESMTP id p1QCxkTJ028803;
Sat, 26 Feb 2011 19:59:46 +0700
Received: from t3h.hcmuns.edu.vn (t3h [127.0.0.1])
by t3h.hcmuns.edu.vn (8.13.8/8.13.8) with ESMTP id p1R09uB2027368;
Sat, 26 Feb 2011 17:09:56 -0700
From: "(UNDP) World Bank Programme" <info@untied.co.uk>
Reply-To: dispatchdirector9@yahoo.com.cn
Subject: Contact FEDEX Courier
Date: Sun, 27 Feb 2011 07:09:56 +0700
Message-Id: .M39804@untied.co.uk>
X-Mailer: OpenWebMail 2.53
X-OriginatingIP: 172.29.1.23 (dvhieu)
MIME-Version: 1.0
Content-Type: text/plain;
charset=iso-8859-1
To: undisclosed-recipients:;
User avatar
kabo0m
Spam Reporter
 
Posts: 154
Joined: Sun Mar 21, 2010 4:36 pm

Re: Unfinished Transfer of Funds and Gratuity

Postby spamislame » Sat Feb 26, 2011 1:23 pm

kabo0m wrote:
Code: Select all
Reply-To: dispatchdirector9@yahoo.com.cn


You report that here, headers and message:

http://help.yahoo.com/l/us/yahoo/mail/y ... /spam.html

They eventually shut the account down.

Always look for the email address mentioned in the body or the reply-to header. That's their only means of executing the scam (besides the throwaway cell numbers they provide.)

SiL
User avatar
spamislame
Site Admin
 
Posts: 5058
Joined: Tue May 09, 2006 9:18 am


Return to Advance-Fee Fraud [419 Fraud]

Who is online

Users browsing this forum: No registered users and 1 guest