SCAMS | EMAIL | PHONE | MAP | TAGS | EMAIL ANALYSIS | IP LOCATOR
Click to go to Scammed.by homepage
Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD


Scam email #231201 - RE: INHERITANCE FUND TRANSFER NOTIFICATION

Email info

The email was sent on 2017-08-06 01:28:41 and appeared to be from wu.nelsonhall@gmail.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to intermdept1@outlook.com which was the scammer's actual email address.
It was probably sent from 209.85.215.66 in Unknown, United States

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

[image: Click here to learn more about our Head Office complex]














































* CENTRAL BANK OF NIGERIA PHASE II, GARKIFEDERAL CAPITAL
TERRITORY ABUJA-NIGERIA REF:
CBN-0XX2/987 TEL: +2347089073391
ATTN:
BENEFICIARY RE: INHERITANCE FUND TRANSFER NOTIFICATIONWE HAVE
RECEIVED AN INSTRUCTION FROM THE OFFICE OF THE PRESIDENCY, THE FEDERAL
MINISTRY OF FINANCE (FMF), AND THE SENATE COMMITTEE ON FOREIGN PAYMENTS
(SCFP), TO PAY YOU YOUR CONTRACT/INHERITANCE FUND FROM OUR BANK (CENTRAL
BANK OF NIGERIA) IN CONJUNCTION WITH THE HSBC BANK LONDON.THIS IS TO NOTIFY
YOU THAT YOUR FUND WHICH IS THE TOTAL SUM OF TEN MILLION FIVE HUNDRED
THOUSAND DOLLARS (US$10, 500,000.00), AS YOUR CONTRACT/INHERITANCE FUND
HAVE BEEN PROGRAMMED FOR IMMEDIATE PAYMENT TO YOU. AND YOUR INHERITANCE
FUND PAYMENT HAS BEEN FINALIZED TO BE RELEASED TO YOU AS THE LEGITIMATE
BENEFICIARY OF THE FUND, VIA HSBC ATM DEBIT CARD.MEANWHILE, WE WANT YOU TO
CLARIFY IF YOU INDEED APPROVE A WOMAN FEW DAYS AGO TO CLAIM YOUR FUND ON
YOUR BEHALF, WHO NOW CLAIM THAT SHE IS YOUR REPRESENTATIVE SENT BY YOU TO
RECEIVE YOUR FUND. DUE TO THE NATURE OF MY JOB, I CANNOT AFFORD TO MAKE ANY
MISTAKE IN RELEASING THESE FUNDS TO ANYONE EXCEPT YOU WHO IS THE RECOGNIZED
TRUE BENEFICIARY TO THESE FUNDS. NOTE THAT I ASKED HER TO COME BACK NEXT
WEEK SO I CAN VERIFY THIS FACT FROM YOU FIRST. KINDLY CLARIFY US ON THIS
ISSUE BEFORE WE MAKE THIS PAYMENT TO HER WHOM CAME ON YOUR BEHALF.HOWEVER,
NOTE THAT WE ARE WAITING TO HEAR FROM YOU SHORTLY, AS YOU PROVIDE THE
REQUIRED INFORMATION BELLOW TO ENABLE OUR ATM PROCESSING DEPARTMENT TO
ISSUE YOUR ATM CARD TO YOU SO THAT YOU WILL BE ABLE TO CASH YOUR TEN
MILLION FIVE HUNDRED THOUSAND UNITED STATES DOLLARS FROM ANY ATM MARCHING
AT ANY WHERE IN THE WORLD.THE REQUIRED INFORMATION IS AS STATED BELOW:1.
YOUR NAME:2. YOUR ADDRESS:3. YOUR TELEPHONE: 4. FAX: 5.
AGE:6. SEX: 7. YOUR OCCUPATION:NOTE THAT THIS ATM CARD WILL BE SENT TO YOU
THROUGH THE COURIER SUCH AS FEDEX, UPS OR ANY COURIER COMPANY OF YOUR
CHOICE FOR THE DELIVERY OF YOUR ATM CARD TO YOU FOR YOUR EASY CASHING OF
YOUR CONTRACT SUM OF US$10, 500,000.00. FROM THE OFFICE OF THE PRESIDENCY,
THIS REPUTABLE BANK HAS BEEN APPROVED IN CONJUNCTION WITH THE HSBC BANK
LONDON,THEY HAS BEEN ACCREDITED TO HANDLE AND MAKE PAYMENT TO ALL FOREIGN
CONTRACT/INHERITANCE FUNDS BENEFICIARIES THIS SECOND QUARTER PAYMENT OF THE
YEAR 2017. THEREFORE, WE WAIT TO HEAR FROM YOU SOON.WE ARE WAITING TO HERE
FROM YOU AS SOON AS POSSIBLE.YOURS REGARDS,DR YURI AKOTADIRECTOR OF FOREIGN
OPERATIONS DEPARTMENTCENTRAL BANK OF NIGERIA (CBN)TEL: +2347089073391*

SpamAssassin Report (spam score: 4.2)


 pts rule name               description
---- ---------------------- --------------------------------------------------
 0.0 TVD_RCVD_IP4           Message was received from an IPv4 address
 0.0 TVD_RCVD_IP            Message was received from an IP address
 0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                            (wu.nelsonhall[at]gmail.com)
-0.0 RCVD_IN_DNSWL_NONE     RBL: Sender listed at http://www.dnswl.org/, no
                            trust
                            [209.85.215.66 listed in list.dnswl.org]
 0.0 DKIM_ADSP_CUSTOM_MED   No valid author signature, adsp_override is
                            CUSTOM_MED
 1.6 SUBJ_ALL_CAPS          Subject is all capitals
-0.0 SPF_PASS               SPF: sender matches SPF record
 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                            (intermdept1[at]outlook.com
)
 0.0 MISSING_MIME_HB_SEP    BODY: Missing blank line between MIME header and
                            body
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 0.0 T_DKIM_INVALID         DKIM-Signature header exists but is not valid
 1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain different
                            freemails
 1.2 NML_ADSP_CUSTOM_MED    ADSP custom_med hit, and not from a mailing list



Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)

Comments

Where the scam probably came from



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer