SCAMS | EMAIL | PHONE | MAP | TAGS | EMAIL ANALYSIS | IP LOCATOR
Click to go to Scammed.by homepage
Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD


Scam email #255858 - WELCOME TO THE WESTERN UNION MONEY TRANSFER HEAD OFFICE

Email info

The email was sent on 2019-01-24 17:19:32 and appeared to be from foreignremittancedepartment33@gmail.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to foreignremittancedepartment33@gmail.com which was the scammer's actual email address.
It was probably sent from 209.85.166.193 in Unknown, United States

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

WELCOME TO THE WESTERN UNION MONEY TRANSFER HEAD OFFICE
OUAGADOUGOU BURKINA FASO IN WEST COST,
ADDRESS: AVENUE YENNENGA 2139
OUAGADOUGOU BURKINA FASO
E-MAIL: westernunionheardoffice@expressmail.dk

ATTN DEAR BENEFICIARY,

THIS DEPARTMENT OFFICE WESTERN UNION HAS BEEN INSTRUCTED TO SEND YOUR
FUND TO YOUR LOCATION IN YOUR CITY FROM THE DIAMOND WESTERN UNION
DEPARTMENT HERE IN BURKINA FASO OUAGADOUGOU, YOU WILL BE RECEIVING
YOUR FUND AT RET OF ($4,500 U.S.D ) PER DAY AND YOU WILL RECEIVE THE
TOTAL SUM OF ($950.000.00 US DOLLARS) I WANT TO USE THIS OPPORTUNITY
TO INFORM YOU THAT GOVERNMENT IS PLANNING TO CANCEL YOUR WINNER FUNDS
AND TRANSFER IT INTO GOVERNMENT ACCOUNTS IF WE DID NOT HEAR FROM YOU
WITHIN 2DAYS, YOU ARE REQUIRED TO SEND US OUR TRANSFER CHARGES THE SUM
OF $120.00 USD FOR THE $4,500 USD THAT WE HAVE ALREADY SEND, MEANWHILE
SEND THE $120.00USD TO US IMMEDIATELY TODAY FOR FASTER SENDING OF YOUR
FUND CORRECTLY BY TOMORROW MORNING...

AFTER THE MONEY HAVE BEEN TRANSFERRED CORRECTLY TO YOUR ADDRESS WE
WILL MAIL YOU THE PAYMENT INFORMATION'S YOU NEED TO PICK UP YOUR MONEY
IN ANY WESTERN UNION AROUND YOUR LOCATION CORRECTLY BECAUSE THE ONE
THAT IS HERE IS NOT CORRECT BECAUSE WE HAVE NOT RECEIVED OUR $120.00
USD ONLY.

REASON WHY WE NEED YOU TO SEND US THE $120.00 USD IS THAT WE TRIED TO
DEDUCT THE TRANSFERRING FEE OUT FROM YOUR FUND BUT THE MINISTER
ADMINISTRATOR TRUST FUND OF BURKINA FASO TOLD US THAT NO ONE HAS RIGHT
OVER YOUR FUND AS IT HAVE BEEN SIGNED AND STAMPED THAT NO MONEY SHOULD
BE DEDUCTED UNTIL IT GETS TO YOUR HANDS TO AVOID STEALING SOME OF THE
FUNDS SO IF YOU WANT TO TRACK THE MONEY AND CONFIRM IF THE FUNDS IS
TRANSFERRED ENTER OUR CODE

HERE IS THE CONTACT INFORMATION OF THE WESTERN UNION
DIRECTOR GENERAL: MR.BILL HATTEL
OFFICIAL E-MAIL: westernunionheardoffice@expressmail.dk

THEN CLICK TRACKING AND ENTER THE MTCN NUMBER; 9367070847 ENTER
SENDERS FIRST TERRY.......ENTER SENDERS LAST NAME...COLLINS AND CLICK
TRACKING AND IT WILL SHOW YOU THAT YOUR FUNDS IS AVAILABLE FOR YOU TO
PICK IT UP SENDER NAME: TERRY
COLLINS, WWW.WESTERN UNION.COM

SENDER'S NAME:.................................TERRY COLLINS
TEXT QUESTION:.................................SENT?
ANSWER:.................................TO YOU.
AMOUNT:.................................$4,500 ONLY
M.T.C.N:.................................9367070847
.
HTTPS://WWW.WESTERNUNION.COM/GLOBAL-SERVICE/TRACKTRANSFERSUCCESS

ASAP FINALLY URGENT SEND US THE $120.00 USD TO ENABLE US PROCEED ON
YOUR PAYMENT IMMEDIATELY RIGHT,

BELOW IS OUR ACCOUNT'S INFORMATION FOR YOU TO SEND THE $120.00 USD
THROUGH WESTERN UNION MONEY TRANSFER BEEN OUR TRANSFERRING CHARGE FOR
YOUR $4,500 USD,

1. RECEIVER NAME:.............................. ITUMA CELEB

2. CITY/COUNTRY:..............................BURKINA FASO OUAGADOUGOU,
3. QUESTION:..............................WHO IS ABLE
4. ANSWER:..............................GOD
5. AMONUT:..............................$120.00
6. MTCN:............................ ?
7. SENDER NAME:................. ?

YOUR URGENT RESPOND IS HIGHLY NEEDED.
WAITING TO HEAR FROM YOU AS SOON AS YOU RECEIVE THIS MESSAGE TO
QUICKEN THE PROCESS OF THE RELEASING YOUR PAYMENT TO YOU TODAY.
THEN CONTACT US WITH YOUR FULL INFORMATION.

MR.ROY ADAMS
PHONE NUMBER: +226 64694800.

SpamAssassin Report (spam score: 5)


   pts rule                       description                                       
  ---- ----------------------     --------------------------------------------------
000.00 US                         DOLLARS) I WANT TO USE THIS OPPORTUNITY 
TO INFORM YOU THAT GOVERNMENT IS PLANNING TO CANCEL YOUR WINNER FUNDS
AND TRANSFER IT INTO GOVERNMENT ACCOUNTS IF WE DID NOT HEAR FROM YOU
WITHIN 2DAYS, YOU ARE REQUIRED TO SEND US OUR TRANSFER CHARGES THE SUM
OF $120.00 USD FOR THE $4,500 USD THAT WE HAVE ALREADY SEND, MEANWHILE
SEND THE $120.00USD TO US IMMEDIATELY TODAY FOR FASTER SENDING OF YOUR
FUND CORRECTLY BY TOMORROW MORNING...

AFTER THE MONEY HAVE BEEN TRANSFERRED CORRECTLY TO YOUR ADDRESS WE
WILL MAIL YOU THE PAYMENT INFORMATION'S YOU NEED TO PICK UP YOUR MONEY
IN ANY WESTERN UNION AROUND YOUR LOCATION CORRECTLY BECAUSE THE ONE
THAT IS HERE IS NOT CORRECT BECAUSE WE HAVE NOT RECEIVED OUR $120.00
USD ONLY.

REASON WHY WE NEED YOU TO SEND US THE $120.00 USD IS THAT WE TRIED TO
DEDUCT THE TRANSFERRING FEE OUT FROM YOUR FUND BUT THE MINISTER
ADMINISTRATOR TRUST FUND OF BURKINA FASO TOLD US THAT NO ONE HAS RIGHT
OVER YOUR FUND AS IT HAVE BEEN SIGNED AND STAMPED THAT NO MONEY SHOULD
BE DEDUCTED UNTIL IT GETS TO YOUR HANDS TO AVOID STEALING SOME OF THE
FUNDS SO IF YOU WANT TO TRACK THE MONEY AND CONFIRM IF THE FUNDS IS
TRANSFERRED ENTER OUR CODE

HERE IS THE CONTACT INFORMATION OF THE WESTERN UNION
DIRECTOR GENERAL: MR.BILL HATTEL [...] -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (foreignremittancedepartment33[at]gmail.com) 1.5 SUBJ_ALL_CAPS Subject is all capitals 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (foreignremittancedepartment33[at]gmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary: -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2) [209.85.166.193 listed in wl.mailspike.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.166.193 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists… #dnsbl-block for more information. [URIs: westernunion.com] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 UPPERCASE_75_100 message body is 75-100% uppercase 0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid 1.0 FREEMAIL_REPLY From and body contain different freemails 0.9 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 3.0 MONEY_FRAUD_5 Lots of money and many fraud phrases



Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)

Comments

Where the scam probably came from



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer