SCAMS | EMAIL | PHONE | MAP | TAGS | EMAIL ANALYSIS | IP LOCATOR
Click to go to Scammed.by homepage
Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD


Scam email #231395 - HOW ARE DOING TODAY MY DEAR

Email info

The email was sent on 2017-08-12 14:59:56 and appeared to be from customer82@tim.it but this address could have been spoofed.
If you replied to this email, your reply would have been sent to uwestern54@yahoo.com which was the scammer's actual email address.
It was probably sent from 197.234.219.20 in Unknown, Benin

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

OFFICE OF THE WESTERN UNION MONEY TRANSFER.COTONOU BENIN REPUBLIC / ADDRESS
4955 AGBOKOU

HOW ARE DOING TODAY MY DEAR

THIS IS SEVERAL TIMES WE WESTERN UNION BENIN REPUBLIC ARE SENDING YOU THIS THE
SAME EMAIL TO START PICKING UP YOUR PAYMENT AS WE TOLD YOU BEFORE THIS
INFORMATION REACH US SINCE LAST THREE WEEK AGO FROM OUR CORPORATE HEADQUARTERS
UBA BANK WESTERN UNION,

STATES THAT YOU ONLY HAVE 48 HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF YOUR
MTCN TO ENABLE YOU CASH UP YOUR FIRST $ 6,000:00 FROM YOUR TOTAL (FUND OF $
10.5 MILLION (TEN MILLION FIVE HUNDRED THOUSAND UNITED STATE DOLLARS WHICH
WILL TRANSFER TO YOU COMPLETELY.) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE
THIS PAYMENT WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND PAY WHATEVER YOU HAVE
FOR THE ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED
FEE TIME IS OF THE ESSENCE HERE ,

CONFIRMING YOUR TRANSFERRING ADDRESS AS
LISTED DOWN HERE AS
YOUR RECEIVED NAME
YOUR COUNTRY :
YOUR CITY:
PHONE NO:
YOUR ADDRESS:

SINCE YOU DON'T HAVE THE REQUIRE FEE SO GO AND SEND ANY AMOUNT OF MONEY THAT
YOU HAVE AT HAND START FROM $45 TO 100.00 SO THAT WE WILL ACTIVATE YOUR MTCN
AND
SEND IT TO YOU TODAY, UPON RECEIPT OF THIS PAYMENT, I WILL GUARANTEE YOU 100%
SURE THAT YOU MUST PICK UP YOUR FIRST PAYMENT OF YOUR FUND WITHIN 2HOuRs 30
MINTS AFTER PICKING UP THE MONEY FROM YOU AND I AM ASSURING YOU NOW THAT YOU
WILL NEVER BE DISAPPOINTED AFTER SENDING THE LAST FEE WHICH IS ANY AMOUNT OF
MONEY THAT YOU HAVE AT HAND PLEASE WE ARE VERY SORRY FOR ALL THE PROBLEM THAT
YOU HAVE PASSED THROUGH BECAUSE OF THIS YOUR BELONG PAYMENT OF WHICH YOU
FAILED
TILL NOW

REMEMBER THAT ANY DELAY IS ON YOUR HAND NOW AND DON'T BLAME ANYBODY HERE IF YOU
LOOSE YOUR PAYMENT BECAUSE IS YOUR DUTY TO BE FAST AND SEND THE MONEY SOONEST
FOR YOUR TRANSFER TO BEGINS IN TRANSFERRING TO YOU FOR YOUR TOTAL FUNDS OF $
10.5 MILLION USD TO YOU IMMEDIATELY.

I REPEAT MY VOW AGAIN, ONCE YOU SEND THIS FEE DEFINITELY YOUR PAYMENT MUST BE
DONE TO YOU AND NOTHING MORE WILL BE REQUEST FROM YOU. NO ADDITIONAL FEE
AGAIN
TO AVOID MISTAKE IN SENDING YOUR DAILY PAYMENTS TO YOU, I SUGGEST YOU RECONFIRM
YOUR FULL RECEIVING DETAILS INFORMATION UPON CONFIRMING THE MTCN AND SENDER
NAME OF THE FEE TO ENABLE YOU GET YOUR 6,000:00 USD, TODAY AND REMEMBER IF YOU
MISS THIS WONDERFUL OPPORTUNITY THAT MEANS IT WILL BE VERY HARD FOR YOU TO
GET
THIS FUND AGAIN,

BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR ACTIVATION UPON
CASHING UP OF YOUR FIRST 6000:00 USD, ALSO I AM USING THIS MEDIUM TO INFORM
YOU
THAT IF YOU FAIL TO PAY THE BALANCE SUM THEN YOU WILL LEAVE US WITH NO OPTION
BUT TO DEACTIVATE YOUR MTCN OF WHICH YOU WILL AND CAN NEVER CASH UP THE
BALANCE
SUM. SO I WANT YOU TO SEND THE AMOUNT YOU HAVE AT HAND.WITH THIS INFORMATION
BELLOW. AND UPDATE US AMOUNT THAT YOU SEND AND THE MTCN. SEND THE PAYMENT
DETAIL
TO HIM

1.RECEIVER NAME ... Lee Atam
2. COUNTRY ... BENIN REPUBLIC.
3. CITY ... COTONOU.
4 ... TEST QUESTION .. HONEST
5. ANSWER ... TRUST.
6. AMOUNT .... AS FROM $35 TO $80

SO RUSH TO WESTERN UNION OR MONEY GRAM NOW AND SEND ANY MONEY THAT YOU HAVE AT
HAND NOW, CALL ME ON THIS LINE AS SOON AS YOU SEND THE MONEY.
REGARDS,
THE MANGER OF WESTERN UNION
MR. FRANCIS WILLIAM
DIRECT ONLINE TELEPHONE /CALL (+229_6735 6181)

SpamAssassin Report (spam score: 13.5)


 pts rule name               description
---- ---------------------- --------------------------------------------------
 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                            [82.57.200.117 listed in psbl.surriel.com]
 0.0 TVD_RCVD_IP4           Message was received from an IPv4 address
 0.0 TVD_RCVD_IP            Message was received from an IP address
 0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                            (customer82[at]tim.it)
 1.5 RCVD_IN_SORBS_WEB      RBL: SORBS: sender is an abusable web server
                            [197.234.219.20 listed in dnsbl.sorbs.net]
 0.5 RCVD_IN_SORBS_SPAM     RBL: SORBS: sender is a spam source
                            [82.57.200.117 listed in dnsbl.sorbs.net]
 1.6 SUBJ_ALL_CAPS          Subject is all capitals
 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
                            (uwestern54[at]yahoo.com
)
 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
                            digit (customer82[at]tim.it)
 1.2 MISSING_HEADERS        Missing To: header
 0.0 LOTS_OF_MONEY          Huge... sums of money
 1.2 UPPERCASE_75_100       message body is 75-100% uppercase
 1.9 REPLYTO_WITHOUT_TO_CC  REPLYTO_WITHOUT_TO_CC
 1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain different
                            freemails
 1.4 SPOOFED_FREEM_REPTO    Forged freemail sender with freemail reply-to
 0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money



Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)

Comments

Where the scam probably came from



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer