Click to go to homepage
Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD

Scam email #255420 - PAYMENT

Email info

The email was sent on 2018-12-04 17:11:00 and appeared to be from but this address could have been spoofed.
If you replied to this email, your reply would have been sent to which was the scammer's actual email address.
It was probably sent from in Unknown, United States

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

Exchange Manager/ Financial Control Dept
Private Banking Section Ext, 3


Dear Bonafide Beneficiary

I wish to inform you that from the records of outstanding foreign payments
due for release to you before we have just received an account from one Mr
Robert Marengere of Canada stating that you have authorized him to forward
this account with Citi Bank for immediate transfer of your funds as your
next of kin so we have decided to confirm from you before any step.

So kindly confirm to us urgently before the transfer will take place as we
shall not hold responsible for it if you did not respond quickly to know
the truth because if you did not confirm within 24hrs from now then we
shall carry on with the transfer process.

And if you confirm that he is not your next of kin or never authorized him
then you get an affidavit immediately .
Note: the payment is schedule to hold within *72 hours* immediately you get
back to us with the above mention requirement. You are advice to contact me
on the direct stated above number and E-mail, expecting your immediate

We look forward to hearing from you to enable us serve you better.
For and on Behalf of, Nedbank Of South Africa.

Yours faithfully,
Mr.sithole Brown
Head, Financial Controller Manager.
Nedbank of South Africa .

SpamAssassin Report (spam score: 1.4)

 pts rule                       description                                       
---- ----------------------     --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE         RBL: Sender listed at, no   
                                trust [ listed in]   
-1.9 BAYES_00                   BODY: Bayes spam probability is 0 to 1% [score:   
 0.0 TVD_RCVD_IP4               Message was received from an IPv4 address         
 0.0 TVD_RCVD_IP                Message was received from an IP address           
 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit     
 0.0 DKIM_ADSP_CUSTOM_MED       No valid author signature, adsp_override is       
-0.0 SPF_PASS                   SPF: sender matches SPF record                    
 0.0 FREEMAIL_FROM              Sender email is commonly abused enduser mail      
                                provider (brightwiliams1000[at]         
 1.9 DATE_IN_FUTURE_06_12       Date: is 6 to 12 hours after Received: date       
 0.0 T_DEAR_BENEFICIARY         BODY: Dear Beneficiary:                           
 0.0 PP_MIME_FAKE_ASCII_TEXT    BODY: MIME text/plain claims to be ASCII but isn't
 0.1 DKIM_SIGNED                Message has a DKIM or DK signature, not           
                                necessarily valid                                 
 0.1 DKIM_INVALID               DKIM or DK signature exists, but is not valid     
 0.9 NML_ADSP_CUSTOM_MED        ADSP custom_med hit, and not from a mailing list  

Please be careful with the links in the above email - strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)


Where the scam probably came from

theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer