SCAMS | EMAIL | PHONE | MAP | TAGS | EMAIL ANALYSIS | IP LOCATOR
Click to go to Scammed.by homepage
Forward scams to - remove your name and email address first! To contact us, click 'contact us' at the bottom


Scam email #229728 - good day

Email info

The email was sent on 2017-06-05 04:12:00 and appeared to be from zorgen@alice.it but this address could have been spoofed.
If you replied to this email, your reply would have been sent to moneygram098@outlook.com which was the scammer's actual email address.
It was probably sent from 197.234.219.41 in Unknown, Benin

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam


National Road, Musina Limpopo, Benin Republic

Messina Shopping Centre

National Road, Musina Limpopo, Benin Republic

Tel: +1-(800) 542-3590 (Customer care Hotline)

Tel: +1-(800) 666-3947

Website: http://www.moneygram.com



-------------------------------------------------------



CONGRATULATIONS ONCE AGAIN AND VERY URGENT!



THIS IS YOUR FINAL NOTIFICATION OF YOUR OUTSTANDING PAYMENT OF US$1,000,000.00

TO BE PAID OUT TO YOU AS YOUR COMPENSATION FUND:

Attn: Beneficiary,



I write to inform you that we have agreed and already sent you US$9,057.00

dollars through money gram as we have been given the mandate to transfer your

full compensation payment total sum of US$1,000,000.00, I calling your

telephone number to give you the information through phone but you did not pick

up my calls now I decided to email you the REFERENCE NUMBER and sender name so

that you will pick up the first payment US$9,057.00 today to enable us send

another US$9,057.00 tomorrow as you know we will be sending you only

US$9,057.00 per day.

Below are the two payment of difference sender's information.



Sender/Remitente:

REFERENCE NO#: 880-546-59

Sender Name: Joel Uba

Amount Sent: US$5,000.00



Sender/Remitente:



REFERENCE NO#: 488-540-21

Sender Name: Marja Wunderlich

Amount Sent: US$4,057.00



You can verify the reference number in any Money Gram office near you or by

tracking it on our website with this link,( https://secure.moneygram.com/track

You have to re-confirm your details to avoid any wrong deposit:



Full Name:

Home Address :

Phone Number:

Country:

Sex:

Age:

Occupation:

ID Copy:



Contact Information

Contact Name: Mr. John Edward

Email:(moneygram098@outlook.com)

Tel: +229 9914 1894



But you are advised to know that this payment/prearrange reference number

given to you are not registered or active for collection in any of your Money

Gram branch office, I have told you that as soon as you send the $119.00USD to

the information below, you will get your release funds.



Receiver Name: Frank Levi

Country: Cotonou Benin Republic

Question: MONEY

Answer: GRAM

Amount: $119

MTCN#...........

SENDER'S NAME....



I wait to hear from you as soon as possible and feel free to send me your

mobile/telephone number or send me an sms text, then I will give you a call.





WAITING FOR YOUR URGENT RESPONSE.

YOURS FAITHFULLY, VIEW ATTACHED PAYMENT SLIPS

Yours in Services,

Dr. Lugard Christ

Remittance Manager,

International Customer Relation Officer

VBS Mutual Bank Benin.


SpamAssassin Report (spam score: 11.4)


 pts rule name               description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[197.234.219.41 listed in dnsbl.sorbs.net]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: outlook.com]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.9 URG_BIZ BODY: Contains urgent matter
0.0 TVD_RCVD_IP4 Message was received from an IPv4 address
0.0 TVD_RCVD_IP Message was received from an IP address
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(zorgen[at]alice.it)
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[82.57.200.117 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[82.57.200.117 listed in psbl.surriel.com]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(moneygram098[at]outlook.com
)
1.2 MISSING_HEADERS Missing To: header
0.0 LOTS_OF_MONEY Huge... sums of money
1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.4 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases

Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)

Comments

Where the scam probably came from



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer