SCAMS | EMAIL | PHONE | MAP | TAGS | EMAIL ANALYSIS | IP LOCATOR
Click to go to Scammed.by homepage
Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD


Scam email #255547 - FROM OFFICE OF THE WESTERN UNION MONEY TRANSFER

Email info

The email was sent on 2018-12-18 01:14:18 and appeared to be from jaxxon@gcn.ua but this address could have been spoofed.
If you replied to this email, your reply would have been sent to officialsuser71@gmail.com which was the scammer's actual email address.
It was probably sent from 91.192.136.22 in Odessa, Ukraine

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam



--
FROM OFFICE OF THE WESTERN UNION MONEY TRANSFER.
ADDRESS NO.72 AGATA ROAD, COTONOU BENIN REPUBLIC
WESTERN UNION HEAD OFFICE DEPARTMENT REPUBLIC OF BENIN.
FOREIGN CONTRACTOR PAYMENT OFFICE
TELEPHONE: +229 6843 3938
EMAIL: officialsuser71@gmail.com
WEB http://WWW.WESTERNUNION.COM

DEAR CUSTOMER,

FOLLOW UP THE INSTRUCTION GIVEN BELOW BECAUSE AFTER OUR MEETING HELD
WITH THE FBI, UNITED NATION, BOARD DIRECTORS OF WESTERN UNION AND
FEDERAL MINISTRY OF FINANCE, THEY FINALIZE THAT YOU HAVE ONLY 48HOURS
GIVEN TO RECEIVE YOUR FIRST PAYMENT OF $5,000 USD FROM THE TOTAL FUNDS
WHICH IS ($2.5 M) SINCE YOU ARE FINDING IT DIFFICULT TO MAKE THIS
PAYMENT, WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND PAY WHATEVER YOU
HAVE FOR THE FEES SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED
SUM.

OUR GOVERNMENT HAVE WARN YOU TO STOP FURTHER COMMUNICATION/DEALING WITH
ANY BANKS THAT HAVE NO WEBSITE DUE TO FRAUD GOING ON WORLDWIDE. ANY
BANKS
THAT ARE CONTACTING YOU WITHOUT WEBSITE IS FAKE. PLEASE VIEW OUR WEBSITE
NOW:http://WWW.WESTERNUNION.COM.

THEREFORE GO STRAIGHT NOW AND PAY ANY AMOUNT YOU HAVE AT HAND FOR THE
FEES TO ENABLE US RELEASE YOUR PAYMENT THAT IS PLACE ON HOLD BY THE
MANAGEMENT
AND BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR FEES
UPON CASHING UP YOUR FIRST $5,000:00 USD, ALSO I AM USING THIS MEDIUM TO
INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL LEAVE US WITH NO
OPTION BUT TO CANCEL THE TRANSFER TO YOU AND REDIRECT YOUR FUND TO THE
GOVERNMENT. HERE IS THE INFORMATION OF YOUR FIRST PAYMENT BUT IT IS
PLACE ON HOLD BY THE MANAGEMENT AND YOU CAN NOT BE ABLE TO PICK IT UP
UNTIL YOU SEND THE DEMAND FEE WHICH IS ANY AMOUNT OF MONEY YOU HAVE,
JUST TO PROVE HOW SERIOUS YOU ARE.

https://wumt.westernunion.com/asp/orderStatus.asp?country
1. SENDER FIRST NAME....SAHRIR
2. SENDER SECOND NAME...SAAD
3. TEST QUESTION...FROM ME
4. TEST ANSWER.....TO YOU
5. AMOUNT ..........$5,000 USD
6. MTCN...........9167653719 (Available for pick up by receiver)

FOR YOUR INFORMATION DO NOT EXPECT THE RELEASING OF YOUR PAYMENT WITHOUT
SENDING THE MONEY REQUIRED AND REMEMBER THAT YOU ARE GIVEN ONLY 24 HOURS
TO COMPLY OR YOUR TRANSFER WILL BE CANCEL IMMEDIATELY SINCE YOU ARE TOLD
TO SEND ANY AMOUNT OF MONEY YOU HAVE IN ORDER TO HELP YOU. BELOW IS OUR
ACCOUNT OFFICER NAME WHICH YOU WILL USE TO SEND WHATEVER YOU HAVE TO
ENABLE US RELEASE YOUR FIRST PAYMENT IMMEDIATELY.

1. RECEIVER NAME...JOE ANDY
2. COUNTRY... BENIN REPUBLIC
3. CITY... COTONOU.
4. TEST QUESTION...WHAT COLOR?
5. TEST ANSWER...WHITE.
6. AMOUNT ............ANY

SEND US THE MTCN NUMBER IMMEDIATELY YOU SEND THE MONEY AND IMMEDIATELY
WE CONFIRM THE TRANSFER FEE WE WILL RELEASE YOUR FIRST PAYMENT $5000
TODAY
AND NOT TOMORROW. MY DIRECT PHONE LINE IS +229 6843 3938 MR.HENRY MARK
ALSON FROM THE HEAD OFFICE OF WESTERN UNION BENIN REPUBLIC FOR YOUR
PAYMENT

MR.HENRY MARK
GENERAL OPERATION MANAGER.
EMAIL: officialsuser71@gmail.comm
TELEPHONE NUMBER: +229 6843 3938

--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.


SpamAssassin Report (spam score: 10.5)


 pts rule                       description                                       
---- ----------------------     --------------------------------------------------
-1.9 BAYES_00                   BODY: Bayes spam probability is 0 to 1% [score:   
                                0.0000]                                           
 0.0 TVD_RCVD_IP                Message was received from an IP address           
 0.0 TVD_RCVD_IP4               Message was received from an IPv4 address         
 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit          
                                (officialsuser71[at]gmail.com)                    
 1.5 SUBJ_ALL_CAPS              Subject is all capitals                           
-0.0 SPF_PASS                   SPF: sender matches SPF record                    
 1.3 RCVD_IN_RP_RNBL            RBL: Relay in RNBL,                               
                                https://senderscore.org/blacklistlookup/          
                                [91.192.136.8 listed in bl.score.senderscore.com] 
-0.0 RCVD_IN_DNSWL_NONE         RBL: Sender listed at http://www.dnswl.org/, no   
                                trust [91.192.136.8 listed in list.dnswl.org]     
 1.5 RCVD_IN_SORBS_WEB          RBL: SORBS: sender is an abusable web server      
                                [91.192.136.22 listed in dnsbl.sorbs.net]         
 1.0 PP_MIME_FAKE_ASCII_TEXT    BODY: MIME text/plain claims to be ASCII but isn't
 0.0 LOTS_OF_MONEY              Huge... sums of money                             
 0.0 UPPERCASE_75_100           message body is 75-100% uppercase                 
 1.0 HK_NAME_MR_MRS             No description available.                         
 2.1 FREEMAIL_FORGED_REPLYTO    Freemail in Reply-To, but not From                
 0.9 MONEY_FRAUD_5              Lots of money and many fraud phrases              
 2.9 ADVANCE_FEE_3_NEW_MONEY    Advance Fee fraud and lots of money               



Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)

Comments

Where the scam probably came from



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer