Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD

Scam email #255984 - Attention Dear Sole Beneficiary.

Email info

The email was sent on 2019-02-11 14:34:14 and appeared to be from bmhtur6453@yahoo.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to jendib2534@yahoo.com which was the scammer's actual email address.
It was probably sent from 77.238.177.33 in Dublin, Ireland

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Header field	Description	Value
X-Apparently-To:	Used when there is no 'to' field in the header, does the same thing (says what email address(es) the email is sent to	[email address removed] Mon, 11 Feb 2019 11:34:14 +0000
Return-Path:	The address the email was sent from, or at least the one this email should be 'bounced' back to if it can not be delivered. Often spammers and scammers modify the email header to set a different return-path	[email address removed]
X-YahooFilteredBulk:	The IP here was blacklisted by Yahoo for sending spam	77.238.177.33
Received-SPF:	Returns 'pass' if the email was sent legitimately, 'neutral' if the server thinks nothing is right or wrong, 'soft fail' if it's not a serious issue, 'fail' if the email was sent by an unauthorised user or IP address (often if the mail server is hacked into), 'none' if the server can't tell, 'permerror' if the mail client does not understand what the server is saying, 'temperror' if the client can't connect to the server. More info	pass (domain of yahoo.com designates 77.238.177.33 as permitted sender)
X-YMailISG:	A unique ID added by the Yahoo Inbound Spam Guard	ucG4E98WLDuMFP4a.Qzrbf8itTiQjWDENVWWqs1gJDIDNjTO UxgTt6DbAblvnh6TsnPL24V68_QU4Af2NBl11BJwuTc8AaCyFBsspHbvsrQQ 2f2u6Iuhg7oQgOBcebHcCPtm94tApAC.C2EKwRsYuBrV05E4VX2YUgFWuar7 8a5oMF50E467oJBp9ZOGLbxVFWCMC2veaTAc6VMdD5IqFV206eThQWYkJoEh rV265qcVw1qe3LVfPWC8JK8rAHB82iDPkB.J0PIDcCNr1aX0PfQLBGcr1Qka gYlnYARyAFQtgYOWlpm22V_M3e0CTxgQc49GFag5biz3yUbqGfpmfg67qoga pxfixYX_7Csks5T4CC4hkGRIoSBwL8jLX1OVSvxmvUvTzTrU4hUoA42E6pcg chmWIl0dGmoKKhoiHTkvuvWsyKMQ0CPHMI9jyR1BCxYJ6Q3Ykmfqy8unzFid L1hIjvRvMfEqjlbVMFUWJSgcNvb__EDc88grdwgITLsmgN12f2vkkfakuQKO sUUokuT_pzFUkLq4iMFcd_kmGKCmX35GdvVO.q1YwWKNpDeo4hFwGRD.G62I KGKId8lHSdf_XaHcO.dofCke3SYwXXyJbqvbd43yb3l0BnkdDmR05rILbjuk hGTwG7RPpiYLqj_YJywTpGUvCdF7Q7CoGUBWwfmRM8q_oUyvL3hsRi.Y1pzZ V1HX28el7L0u8eS6WD30KCTEY4dEAo_4pMPAbahdsn5PhYTMtUcM4QG.QLBY m9KBEQDxtjPudFTbACuH3BqHtBolX0v4xA46OA1324sKrQM0hDFeu0QTrCQW YoxHzoAC4aGk8l_wJjKgr3zTWsfsVtHwOwMW0jW_Iu1wzkxBrh7sIGCG2_KH m8zMoh9heiXfOldXkD4zqwI7NztpbdqsOHYXKoHFYwQcFcVnstYuhxiT.3f8 s2Zh6IbDV7B4JCZAf.P.aJNEilZpO5cpLnfXJlYn0ysevFIboxNRlpq0ALcf rVHoXYqY80paPckXyo2j24xb47cx.btmXockpzqhkFNRZ2nZ4Ls.9hJfFnBH IrgGXIVPAqOyxXIovSXwBfL7.PCiOzYSNDDPebhzFrg4QScq_hvk_EozS4Lb QgpeDGNspc5AH_c6KLmjz1fT8fgDprYOaCsZjBcFrtWVBU.ezZBMpD.1wHrh 8tKqtByRUrONMgKdmxQYnojPfhT3nC3daaIt1pcp.yy6YeMfEhev55MVev6x 30RBSZS4RfINyrEkYmsz8UgkdPLdbr6QjXMih2i2xw--
X-Originating-IP:	The IP address the email was originally sent from, sometimes wrong - the bottom 'Received' field in the email header is the most reliable indicator of what IP the email came from	[77.238.177.33]
Authentication-Results:	Returns the result given in the Received-SPF field, and says spf=pass if the email passed authentication. Also uses the DKIM signature, and equally returns dkim=pass if the DKIM signature was okay. More info	mta4288.mail.gq1.yahoo.com [email address removed] header.s=s2048; dkim=pass (ok)
Received:	Part of the journey the email took to reach us/you, these tend to be in the order bottom-to-top so the first 'Received' is the last step the email took and the last 'Received' is the first step the email took	from 127.0.0.1 (EHLO sonic310-12.consmr.mail.ir2.yahoo.com) (77.238.177.33) by mta4288.mail.gq1.yahoo.com with SMTPS; Mon, 11 Feb 2019 11:34:13 +0000
DKIM-Signature:	Used to verify message integrity and ensure the header is not spoofed	v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1549884852; bh=l/zrUOKP8exZj3/whFYwdM51UsXxVYq4T94+96iqM/M=; h=Date:From:Reply-To:Subject:References:From:Subject; b=RcMkRPP8vnx42f36E2+KD9ltv9Kf0na0nnLMFhdDLd2jqqc+MU7pPzacRjQI/RIAuZWnKnVa5rmZZWc4K46cln3z/rA7hzEUbZzInINsmVxrdd1BQ5TTITHhij1i9up27ddo/Bajr+rNCgrlnOFYLN1V778GpX2KzArB9oZI5R0nimF1CHg/56SDJyROwU6ao3nxYmbRKtjn2U8ow6bZG7SzlOCsRJxPqiLvg0NHKhGv4bppp2im0P/G3k8aqaYB7+wooqHis8EBce85a6XCUCDgCFxv7H/1MpAGTaXr1jGXVy4aUraSCwFbFdznAedNY8p/2IOWOPtTS+yzOd8Xsg==
X-YMail-OSG:	A unique ID added by the Yahoo Outbound Spam Guard	lzoi1iMVM1ks0ZIS3NLOHBLnGGXIBy7JFkPPdPMyDfcJK28NwPKqFT0JETKclJK c5m1QRnRJSmNTzM9x17gS9WOeHoOuxcZgxtl2GRVDJHHB5D1Lhgb5Qib1nVCf3QxMNFhs9K08iJ1 uJaQXTBd5qJr6FbsU5Hs.tazt57nJoSufY2S0zR.aq.iljMj.PIK5CdijIFNe4sK0rtf62Bc4zRE 1dK2qhGcV_1HvY2wDVxkroxsyIy8JIc7BSVBh3EtBjyuf1x.lbyKXq685um2cznYq_I9XXyTd2FN k9Bis0jRFrBsquFj9J6zi4NPsVvGHaOmx38DuiJOt9eejNm6jzybcJjgtEX8h4RY33th4IcW_phV CKHc5aO2VIdbg.GLaQDuqBoo4Vs_ur9Q_CdCi74fCBfVFU_Pqxv1Sz7adeahQpR11RBZL61VH9vN 4FZP0gtKQyOjpZvLXQc6Fxh79qXBMeLFgbVHoRB_DtTq6iEqlZQ5tKRVzx1gMZCYZrbfD4E35O0k owMsO4fSgaDOyTLW0OikCphisQjz.yz3Pk46D3fV12dWdWwl1SVIAYO7raDbtdmyufj9moXinl7. nE5WtfhW4x.2T3p76UX5OFYxdd7r6WaDxMgww8yweGMTmc5irEgvHYjzRTwN4cv9BCEB5ZqSHS64 lM.IBOL7ExvWEvuwh3daLrsbDilaLKCMZosPvdYTaidflUlcWdUG9WotBokZqU5Cs0_1ssMjMKKA 0ZKSVROvlxtWW7LYNOxB_XCskSOOjWpFi0UHP8woQXQ4Nw58XzC1_FtN7TZ6ahMetgAncSXqWRjc agu.wrrHRWZtkBdp1WLo.tlG7.u21wDjt88KRnt05zURaiKHUTo4LDf76ta6hrSDeLQBXFPhYlug 9LiFYyReqdig1a25zyyIhPSfuDufLtuJD3jQhsOOs1Zyli5iAP4Nk33iFccY1y0KABnOM5RAGhNs Kopd5pYz5wdugoGQkNgLq5WcCAJAO.sl28kV8DAnB.CQNXEoDDMmMG._4DRxak35ZxHZsR53C9sc VVaqAlRgEaQKI6yoy4ssWGpN1eX6W.km8KVaMYZaZ6PUND6FmTZSiQf6dq3FrBjHJ06nMLzSIBXl ZDGuVRP544N4-
Received:	Part of the journey the email took to reach us/you, these tend to be in the order bottom-to-top so the first 'Received' is the last step the email took and the last 'Received' is the first step the email took	from sonic.gate.mail.ne1.yahoo.com by sonic310.consmr.mail.ir2.yahoo.com with HTTP; Mon, 11 Feb 2019 11:34:12 +0000
Date:	The date/time the email was sent	Mon, 11 Feb 2019 11:34:10 +0000 (UTC)
From:	This is the address the email was apparently sent from	"Mr William C. Dudley" [email address removed]
Reply-To:	This is the email address any reply would be sent to by default	"Mr William C. Dudley" [email address removed]
Message-ID:	A unique ID assigned to the ID for reference purposes	[email address removed]
Subject:	The subject of the email	Attention Dear Sole Beneficiary.
MIME-Version:	Included, usually 1.0, if the email or header contains any non-ASCII characters or non-text attachments, or if the email is multi-part (contains a plain text version plus an HTML one, lets the user's email client or webmail decide which version to display)	1.0
Content-Type:	What type of content the email usually is, usually text/html, and what character set is used	text/plain; charset=UTF-8
Content-Transfer-Encoding:	How the email has been encoded to comply with regulations (e.g. maximum characters per line)	quoted-printable
References:	Facilitates the threading of emails; helps the email client piece together which emails belong together in a conversation	[email address removed]
X-Mailer:	The software used to send the email. Spambots, including those used by scammers, often falsify this as a version of Outlook or Outlook Express to get through some spam filters	WebService/1.1.13027 YahooMailBasic Mozilla/5.0 (Windows NT 6.1; rv:65.0) Gecko/20100101 Firefox/65.0
Content-Length:	The size of the email, in bytes	3388

Your content is below the advert

The scam

From the Desk Of Mr.William C. Dudley:
Federal Reserve Bank / Headquarter:New York, NY, United States of America: Founded: 1914, New York City, New York, United States:
ADDRESS: 33 Liberty St New York, NY 10045-0001:
Email;william_dudley@126.com,

Attention Dear Sole Beneficiary.

This is two times we have sent you this email notification regarding the final release order of your approval payment files from (4) different banks, Your payment files from (4) different banks, Nat West Bank of London, BANK OF AMERICA, UBA BANK Cotonou Benin Republic and Federal Reserve Bank was compiled and submitted to my desk this month for review. The total sum owed to you by the 4 banks mentioned above was sum up to the tune of US$12,000,000,000.00 (Twelve Billion United State Dollars)

Now the fund has been totally lodged in one particular Escrow account (non deductible) here in FEDERAL RESERVE BANK New York City on your name, while waiting for accreditation to your personal bank account in any part of the world for the quickly transfer.

Meanwhile, after due scrutiny and verification, I confirmed that you have fulfilled all the necessary obligations that will enable the release of your payment US$12,000,000,000.00 (Twelve Billion United State Dollars) to you, but yet your payment was not released to you due to one flimsy excuses or the other from the Bank officials in charge of your payment, because they had the intention of diverting your funds to their private accounts in order to satisfy their interest.

Secondly,the only money you pay for the transfer to take place is just $100 being the approval payment certification from the government of Benin,and you are giving a limited time to send the payment and please be advise that you are to send the payment to American Embassy office in Benin and you are to use this information to send the $100 and please be informed that you are not going to pay any other payment to any body and do not be deceived by any body to send any other payment.

As soon as the Payment information is received, your funds will be wired to your bank account directly from Federal Reserve Bank New York USA . We shall proceed to issue all payments details to the said Mrs. Annette Stillman if we do not hear from you within the next two working days from today.

Even if you don?t have the $100 try to borrow it and send it immediately today or tomorrow because this is your life opportunity and I don?t want you to lose the chance any more.

Here is the information you will use to send the payment through Ria Money Transfer or Western union or buy iTunes card scratch it and send the photo to me just for your own good.

Name Of Receiver: SWEET ROCK
Country:Benin Republic
City: Cotonou
Amount: $100 USD

Send to me the following info once you send the payment.
Senders Name:
Location:
MTCN / Reference #:

Note: If you will prefer to receive your funds in form of a ATM CARD, Then we could load your funds into ATM CARD and ship your Card to your address which will permit you to withdrawal of US$25,000 USD three times daily. Attached here is the scanned copy of my valid working identification for your confidence

You alerted reply urgent

Get back to us now.

Congratulations
Yours in Service,
Mr. William C. Dudley
Chairman Federal Reserve Board New York

SpamAssassin Report (spam score: 10.8)

 pts rule                       description                                       
---- ----------------------     --------------------------------------------------
 0.8 BAYES_50                   BODY: Bayes spam probability is 40 to 60% [score: 
                                0.4982]                                           
 0.0 TVD_RCVD_IP4               Message was received from an IPv4 address         
 0.0 TVD_RCVD_IP                Message was received from an IP address           
 0.0 FREEMAIL_FROM              Sender email is commonly abused enduser mail      
                                provider (bmhtur6453[at]yahoo.com)                
 1.0 MISSING_HEADERS            Missing To: header                                
 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit          
                                (jendib2534[at]yahoo.com)                         
 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit     
                                (bmhtur6453[at]yahoo.com)                         
 0.0 DKIM_ADSP_CUSTOM_MED       No valid author signature, adsp_override is       
                                CUSTOM_MED                                        
-0.0 SPF_PASS                   SPF: sender matches SPF record                    
 1.6 FORGED_YAHOO_RCVD          'From' yahoo.com does not match 'Received' headers
 0.0 T_DEAR_BENEFICIARY         BODY: Dear Beneficiary:                           
-0.0 RCVD_IN_DNSWL_NONE         RBL: Sender listed at http://www.dnswl.org/, no   
                                trust [77.238.177.33 listed in list.dnswl.org]    
 0.0 MIME_QP_LONG_LINE          RAW: Quoted-printable line longer than 76 chars   
 0.1 DKIM_SIGNED                Message has a DKIM or DK signature, not           
                                necessarily valid                                 
 0.0 LOTS_OF_MONEY              Huge... sums of money                             
 0.6 REPTO_QUOTE_YAHOO          Yahoo! doesn't do quoting like this               
 1.5 HK_NAME_FM_MR_MRS          No description available.                         
 0.1 DKIM_INVALID               DKIM or DK signature exists, but is not valid     
 1.6 REPLYTO_WITHOUT_TO_CC      No description available.                         
 1.0 FREEMAIL_REPLYTO           Reply-To/From or Reply-To/body contain different  
                                freemails                                         
 1.0 XFER_LOTSA_MONEY           Transfer a lot of money                           
 0.9 NML_ADSP_CUSTOM_MED        ADSP custom_med hit, and not from a mailing list

Please be careful with the links in the above email - Scammed.by strongly suggests that you do not click on any links in the above message
The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement
You can contact ScamSearch at help at scammed.by for any information, help, or if you have spotted a legitimate email. Please link to the email you think is legitimate.
ScamSearch does not accept any responsibility for visitors enduring any issues as a result of following links in the above email and/or contacting the sender
Please do not contact the sender unless you know what you are doing (i.e. experienced scambaiters)