SCAMS | EMAIL | PHONE | MAP | TAGS | EMAIL ANALYSIS | IP LOCATOR
Click to go to Scammed.by homepage
Forward scams to - remove your name and email address first! To contact us, click 'contact us' at the bottom


Scam email #231032 - Cancelled: CONTACT MONEY GRAM FOR YOUR PAYMENT

Email info

The email was sent on 2017-07-31 10:20:19 and appeared to be from emmanuelonyebuchi405@yahoo.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to emmanuelonyebuchi405@yahoo.com which was the scammer's actual email address.
It was probably sent from 216.39.60.187 in Unknown, United States

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

JUL
31
"CONTACT MONEY GRAM FOR YOUR PAYMENT" has been
cancelled
When Monday, 31 July 2017
12:00 AM to 01:00 AM
(GMT) Greenwich Mean Time - Dublin / Edinburgh / Lisbon / London
Message This email is for all the people that have been scammed in any part of the world, the United Nation have agreed to compensate them with the sum of US$2.5m (Two Million Five Hundred Thousand United States Dollars) This includes all foreign contractors that may have not received their contract sum and people that have had an unfinished transaction or international business that failed due to scammed victim. This is to inform you that your $2.5M USD will be send to you via Money Gram transfer. The total amount mentioned above is with Money Gram ,Note you will be receiving $6,000.00 every day until your total money have been completely transfer to you, Call Mr.James Martins : Tel: +229 68 10 30 53 now and ask him to give you REFERENCE NUMBER and every other information you need to pick up your $6,000 today. Here is what he may require from you. Your Receiver Name...... Your Country..... Tel;........ Age....... Address....... Feel free to contact Money Gram transfer with this information bellow Email(mony_gram191@live.com) You are advised to contact Mr.James Martins of Money Gram transfer Benin Republic as he is our representative in Benin Republic, contact him immediately for yourcompensation payment of $2.5m he will send it to you immediately. We have concluded our effect to your payment through Money Gram transfer $6000.00 daily until the ($2.5m) is completely transferred.So you advice to contact our Agent office in Benin with bellow information.. Money Gram Agent;Mr.James Martins Email;(mony_gram191@live.com) Tel: +229 68 10 30 53 Best Regards Dr Emmanuel .
This Event invitation was sent from   Yahoo Calendar



Attachment content - invite.ics:

BEGIN:VCALENDAR PRODID://Yahoo//Calendar//EN VERSION:2.0 METHOD:CANCEL BEGIN:VEVENT SUMMARY:CONTACT MONEY GRAM FOR YOUR PAYMENT DESCRIPTION:This email is for all the people that have been scammed in any part of the world\, the United Nation have agreed to compensate them with the sum of US$2.5m (Two Million Five Hundred Thousand United States Dolla rs) This includes all foreign contractors that may have not received their contract sum and people that have had an unfinished transaction or\ninter national business that failed due to scammed victim.\n\nThis is to inform you that your $2.5M USD will be send to you via Money Gram transfer. The t otal amount mentioned above is with Money Gram \,Note you will be receivin g $6\,000.00 every day until your total money have been\ncompletely trans fer to you\, Call Mr.James Martins : Tel: +229 68 10 30 53\nnow and ask hi m to give you REFERENCE NUMBER and every other\ninformation you need to pi ck up your $6\,000 today. Here is what he\nmay require from you.\n\nYour R eceiver Name......\nYour Country.....\nTel\;........\nAge.......\nAddress. ......\n\nFeel free to contact Money Gram transfer with this information b ellow Email(mony_gram191@live.com) You are advised to contact\nMr.James Ma rtins of Money Gram transfer Benin Republic as he is our representative in Benin Republic\, contact him immediately for yourcompensation payment of $2.5m he will send it to you immediately.\n\nWe have concluded our effect to your payment through Money Gram transfer\n$6000.00 daily until the ($2. 5m) is completely transferred.So you advice\nto contact our Agent office i n Benin with bellow information..\n\nMoney Gram Agent\;Mr.James Martins\nE mail\;(mony_gram191@live.com)\nTel: +229 68 10 30 53\n\nBest Regards\nDr E mmanuel . CLASS:PUBLIC DTSTART;TZID=Europe/London:20170731T010000 DTEND;TZID=Europe/London:20170731T020000 PRIORITY:0 SEQUENCE:37 STATUS:CONFIRMED UID:4e8e83a5-8b23-400e-8980-e848a1f96d6b DTSTAMP:20170731T071959Z Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:astarael.the.sorrowful@gmail .com Censored Censored Censored Censored Censored m Censored Censored Censored Censored Censored Censored Censored Censored Censored Censored ORGANIZER;CN=emmanuel onyebuchi;SENT-BY="mailto:emmanuelonyebuchi405@yahoo. com":mailto:emmanuelonyebuchi405@yahoo.com X-YAHOO-YID:iwoz5lo3w7zblg2srvxe7g3yhkj5hu66dazu35hr TRANSP:OPAQUE STATUS:CONFIRMED X-YAHOO-USER-STATUS:BUSY X-YAHOO-EVENT-STATUS:BUSY BEGIN:VALARM ACTION:DISPLAY DESCRIPTION: TRIGGER;RELATED=START:-PT30M END:VALARM END:VEVENT BEGIN:VTIMEZONE TZID:Europe/London TZURL:http://tzurl.org/zoneinfo/Europe/London X-LIC-LOCATION:Europe/London BEGIN:DAYLIGHT TZOFFSETFROM:+0000 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19810329T010000 RRULE:FREQ=YEARLY;BYMONTH=3;BYDAY=-1SU END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:+0100 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:19961027T020000 RRULE:FREQ=YEARLY;BYMONTH=10;BYDAY=-1SU END:STANDARD BEGIN:STANDARD TZOFFSETFROM:-000115 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:18471201T000000 RDATE:18471201T000000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:+0000 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19160521T020000 RDATE:19160521T020000 RDATE:19170408T020000 RDATE:19180324T020000 RDATE:19190330T020000 RDATE:19200328T020000 RDATE:19210403T020000 RDATE:19220326T020000 RDATE:19230422T020000 RDATE:19240413T020000 RDATE:19250419T020000 RDATE:19260418T020000 RDATE:19270410T020000 RDATE:19280422T020000 RDATE:19290421T020000 RDATE:19300413T020000 RDATE:19310419T020000 RDATE:19320417T020000 RDATE:19330409T020000 RDATE:19340422T020000 RDATE:19350414T020000 RDATE:19360419T020000 RDATE:19370418T020000 RDATE:19380410T020000 RDATE:19390416T020000 RDATE:19400225T020000 RDATE:19460414T020000 RDATE:19470316T020000 RDATE:19480314T020000 RDATE:19490403T020000 RDATE:19500416T020000 RDATE:19510415T020000 RDATE:19520420T020000 RDATE:19530419T020000 RDATE:19540411T020000 RDATE:19550417T020000 RDATE:19560422T020000 RDATE:19570414T020000 RDATE:19580420T020000 RDATE:19590419T020000 RDATE:19600410T020000 RDATE:19610326T020000 RDATE:19620325T020000 RDATE:19630331T020000 RDATE:19640322T020000 RDATE:19650321T020000 RDATE:19660320T020000 RDATE:19670319T020000 RDATE:19680218T020000 RDATE:19720319T020000 RDATE:19730318T020000 RDATE:19740317T020000 RDATE:19750316T020000 RDATE:19760321T020000 RDATE:19770320T020000 RDATE:19780319T020000 RDATE:19790318T020000 RDATE:19800316T020000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:+0100 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:19161001T030000 RDATE:19161001T030000 RDATE:19170917T030000 RDATE:19180930T030000 RDATE:19190929T030000 RDATE:19201025T030000 RDATE:19211003T030000 RDATE:19221008T030000 RDATE:19230916T030000 RDATE:19240921T030000 RDATE:19251004T030000 RDATE:19261003T030000 RDATE:19271002T030000 RDATE:19281007T030000 RDATE:19291006T030000 RDATE:19301005T030000 RDATE:19311004T030000 RDATE:19321002T030000 RDATE:19331008T030000 RDATE:19341007T030000 RDATE:19351006T030000 RDATE:19361004T030000 RDATE:19371003T030000 RDATE:19381002T030000 RDATE:19391119T030000 RDATE:19451007T030000 RDATE:19461006T030000 RDATE:19471102T030000 RDATE:19481031T030000 RDATE:19491030T030000 RDATE:19501022T030000 RDATE:19511021T030000 RDATE:19521026T030000 RDATE:19531004T030000 RDATE:19541003T030000 RDATE:19551002T030000 RDATE:19561007T030000 RDATE:19571006T030000 RDATE:19581005T030000 RDATE:19591004T030000 RDATE:19601002T030000 RDATE:19611029T030000 RDATE:19621028T030000 RDATE:19631027T030000 RDATE:19641025T030000 RDATE:19651024T030000 RDATE:19661023T030000 RDATE:19671029T030000 RDATE:19711031T030000 RDATE:19721029T030000 RDATE:19731028T030000 RDATE:19741027T030000 RDATE:19751026T030000 RDATE:19761024T030000 RDATE:19771023T030000 RDATE:19781029T030000 RDATE:19791028T030000 RDATE:19801026T030000 RDATE:19811025T020000 RDATE:19821024T020000 RDATE:19831023T020000 RDATE:19841028T020000 RDATE:19851027T020000 RDATE:19861026T020000 RDATE:19871025T020000 RDATE:19881023T020000 RDATE:19891029T020000 RDATE:19901028T020000 RDATE:19911027T020000 RDATE:19921025T020000 RDATE:19931024T020000 RDATE:19941023T020000 RDATE:19951022T020000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:+0100 TZOFFSETTO:+0200 TZNAME:BDST DTSTART:19410504T020000 RDATE:19410504T020000 RDATE:19420405T020000 RDATE:19430404T020000 RDATE:19440402T020000 RDATE:19450402T020000 RDATE:19470413T020000 END:DAYLIGHT BEGIN:DAYLIGHT TZOFFSETFROM:+0200 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19410810T030000 RDATE:19410810T030000 RDATE:19420809T030000 RDATE:19430815T030000 RDATE:19440917T030000 RDATE:19450715T030000 RDATE:19470810T030000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:+0100 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19681027T000000 RDATE:19681027T000000 END:STANDARD BEGIN:STANDARD TZOFFSETFROM:+0000 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:19960101T000000 RDATE:19960101T000000 END:STANDARD END:VTIMEZONE END:VCALENDAR




Attachment content - invite.ics:

BEGIN:VCALENDAR
PRODID://Yahoo//Calendar//EN
VERSION:2.0
METHOD:CANCEL
BEGIN:VEVENT
SUMMARY:CONTACT MONEY GRAM FOR YOUR PAYMENT
DESCRIPTION:This email is for all the people that have been scammed in any
part of the world\, the United Nation have agreed to compensate them with
the sum of US$2.5m (Two Million Five Hundred Thousand United States Dolla
rs) This includes all foreign contractors that may have not received their
contract sum and people that have had an unfinished transaction or\ninter
national business that failed due to scammed victim.\n\nThis is to inform
you that your $2.5M USD will be send to you via Money Gram transfer. The t
otal amount mentioned above is with Money Gram \,Note you will be receivin
g $6\,000.00 every day until your total money have been\ncompletely trans
fer to you\, Call Mr.James Martins : Tel: +229 68 10 30 53\nnow and ask hi
m to give you REFERENCE NUMBER and every other\ninformation you need to pi
ck up your $6\,000 today. Here is what he\nmay require from you.\n\nYour R
eceiver Name......\nYour Country.....\nTel\;........\nAge.......\nAddress.
......\n\nFeel free to contact Money Gram transfer with this information b
ellow Email(mony_gram191@live.com) You are advised to contact\nMr.James Ma
rtins of Money Gram transfer Benin Republic as he is our representative in
Benin Republic\, contact him immediately for yourcompensation payment of
$2.5m he will send it to you immediately.\n\nWe have concluded our effect
to your payment through Money Gram transfer\n$6000.00 daily until the ($2.
5m) is completely transferred.So you advice\nto contact our Agent office i
n Benin with bellow information..\n\nMoney Gram Agent\;Mr.James Martins\nE
mail\;(mony_gram191@live.com)\nTel: +229 68 10 30 53\n\nBest Regards\nDr E
mmanuel .
CLASS:PUBLIC
DTSTART;TZID=Europe/London:20170731T010000
DTEND;TZID=Europe/London:20170731T020000
PRIORITY:0
SEQUENCE:37
STATUS:CONFIRMED
UID:4e8e83a5-8b23-400e-8980-e848a1f96d6b
DTSTAMP:20170731T071959Z
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored

Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:astarael.the.sorrowful@gmail
.com
Censored
Censored
Censored
Censored
Censored
m
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
Censored
ORGANIZER;CN=emmanuel onyebuchi;SENT-BY="mailto:emmanuelonyebuchi405@yahoo.
com":mailto:emmanuelonyebuchi405@yahoo.com
X-YAHOO-YID:iwoz5lo3w7zblg2srvxe7g3yhkj5hu66dazu35hr
TRANSP:OPAQUE
STATUS:CONFIRMED
X-YAHOO-USER-STATUS:BUSY
X-YAHOO-EVENT-STATUS:BUSY
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:
TRIGGER;RELATED=START:-PT30M
END:VALARM
END:VEVENT
BEGIN:VTIMEZONE
TZID:Europe/London
TZURL:http://tzurl.org/zoneinfo/Europe/London
X-LIC-LOCATION:Europe/London
BEGIN:DAYLIGHT
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
TZNAME:BST
DTSTART:19810329T010000
RRULE:FREQ=YEARLY;BYMONTH=3;BYDAY=-1SU
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
TZNAME:GMT
DTSTART:19961027T020000
RRULE:FREQ=YEARLY;BYMONTH=10;BYDAY=-1SU
END:STANDARD
BEGIN:STANDARD
TZOFFSETFROM:-000115
TZOFFSETTO:+0000
TZNAME:GMT
DTSTART:18471201T000000
RDATE:18471201T000000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
TZNAME:BST
DTSTART:19160521T020000
RDATE:19160521T020000
RDATE:19170408T020000
RDATE:19180324T020000
RDATE:19190330T020000
RDATE:19200328T020000
RDATE:19210403T020000
RDATE:19220326T020000
RDATE:19230422T020000
RDATE:19240413T020000
RDATE:19250419T020000
RDATE:19260418T020000
RDATE:19270410T020000
RDATE:19280422T020000
RDATE:19290421T020000
RDATE:19300413T020000
RDATE:19310419T020000
RDATE:19320417T020000
RDATE:19330409T020000
RDATE:19340422T020000
RDATE:19350414T020000
RDATE:19360419T020000
RDATE:19370418T020000
RDATE:19380410T020000
RDATE:19390416T020000
RDATE:19400225T020000
RDATE:19460414T020000
RDATE:19470316T020000
RDATE:19480314T020000
RDATE:19490403T020000
RDATE:19500416T020000
RDATE:19510415T020000
RDATE:19520420T020000
RDATE:19530419T020000
RDATE:19540411T020000
RDATE:19550417T020000
RDATE:19560422T020000
RDATE:19570414T020000
RDATE:19580420T020000
RDATE:19590419T020000
RDATE:19600410T020000
RDATE:19610326T020000
RDATE:19620325T020000
RDATE:19630331T020000
RDATE:19640322T020000
RDATE:19650321T020000
RDATE:19660320T020000
RDATE:19670319T020000
RDATE:19680218T020000
RDATE:19720319T020000
RDATE:19730318T020000
RDATE:19740317T020000
RDATE:19750316T020000
RDATE:19760321T020000
RDATE:19770320T020000
RDATE:19780319T020000
RDATE:19790318T020000
RDATE:19800316T020000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
TZNAME:GMT
DTSTART:19161001T030000
RDATE:19161001T030000
RDATE:19170917T030000
RDATE:19180930T030000
RDATE:19190929T030000
RDATE:19201025T030000
RDATE:19211003T030000
RDATE:19221008T030000
RDATE:19230916T030000
RDATE:19240921T030000
RDATE:19251004T030000
RDATE:19261003T030000
RDATE:19271002T030000
RDATE:19281007T030000
RDATE:19291006T030000
RDATE:19301005T030000
RDATE:19311004T030000
RDATE:19321002T030000
RDATE:19331008T030000
RDATE:19341007T030000
RDATE:19351006T030000
RDATE:19361004T030000
RDATE:19371003T030000
RDATE:19381002T030000
RDATE:19391119T030000
RDATE:19451007T030000
RDATE:19461006T030000
RDATE:19471102T030000
RDATE:19481031T030000
RDATE:19491030T030000
RDATE:19501022T030000
RDATE:19511021T030000
RDATE:19521026T030000
RDATE:19531004T030000
RDATE:19541003T030000
RDATE:19551002T030000
RDATE:19561007T030000
RDATE:19571006T030000
RDATE:19581005T030000
RDATE:19591004T030000
RDATE:19601002T030000
RDATE:19611029T030000
RDATE:19621028T030000
RDATE:19631027T030000
RDATE:19641025T030000
RDATE:19651024T030000
RDATE:19661023T030000
RDATE:19671029T030000
RDATE:19711031T030000
RDATE:19721029T030000
RDATE:19731028T030000
RDATE:19741027T030000
RDATE:19751026T030000
RDATE:19761024T030000
RDATE:19771023T030000
RDATE:19781029T030000
RDATE:19791028T030000
RDATE:19801026T030000
RDATE:19811025T020000
RDATE:19821024T020000
RDATE:19831023T020000
RDATE:19841028T020000
RDATE:19851027T020000
RDATE:19861026T020000
RDATE:19871025T020000
RDATE:19881023T020000
RDATE:19891029T020000
RDATE:19901028T020000
RDATE:19911027T020000
RDATE:19921025T020000
RDATE:19931024T020000
RDATE:19941023T020000
RDATE:19951022T020000
END:STANDARD
BEGIN:DAYLIGHT
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
TZNAME:BDST
DTSTART:19410504T020000
RDATE:19410504T020000
RDATE:19420405T020000
RDATE:19430404T020000
RDATE:19440402T020000
RDATE:19450402T020000
RDATE:19470413T020000
END:DAYLIGHT
BEGIN:DAYLIGHT
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
TZNAME:BST
DTSTART:19410810T030000
RDATE:19410810T030000
RDATE:19420809T030000
RDATE:19430815T030000
RDATE:19440917T030000
RDATE:19450715T030000
RDATE:19470810T030000
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:+0100
TZOFFSETTO:+0100
TZNAME:BST
DTSTART:19681027T000000
RDATE:19681027T000000
END:STANDARD
BEGIN:STANDARD
TZOFFSETFROM:+0000
TZOFFSETTO:+0000
TZNAME:GMT
DTSTART:19960101T000000
RDATE:19960101T000000
END:STANDARD
END:VTIMEZONE
END:VCALENDAR



SpamAssassin Report (spam score: 4.7)


 pts rule name               description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: tzurl.org]
0.0 TVD_RCVD_IP4 Message was received from an IPv4 address
0.0 TVD_RCVD_IP Message was received from an IP address
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[216.39.62.183 listed in dnsbl.sorbs.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[216.39.62.183 listed in list.dnswl.org]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(do-not-reply[at]yahoo.com)
0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is
CUSTOM_MED
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
("emmanuel onyebuchi"

)
1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers
0.0 MISSING_MIME_HB_SEP BODY: Missing blank line between MIME header and
body
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
0.1 MISSING_MID Missing Message-Id: header
0.5 REPTO_QUOTE_YAHOO Yahoo! doesn't do quoting like this
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
1.0 MIME_NO_TEXT No (properly identified) text body parts
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)

Comments

Where the scam probably came from



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer