SCAMS | EMAIL | PHONE | MAP | TAGS | EMAIL ANALYSIS | IP LOCATOR
Click to go to Scammed.by homepage
Forward scams to - remove your name and email address first! TO CONTACT US CLICK HERE INSTEAD


Scam email #257180 - Attn: Beneficiary

Email info

The email was sent on 2019-07-09 04:21:31 and appeared to be from intern_monetaryfundtransferunit@yahoo.com but this address could have been spoofed.
If you replied to this email, your reply would have been sent to intern_monetaryfundtransferunit@yahoo.com which was the scammer's actual email address.
It was probably sent from 74.6.134.124 in New York, United States - Click here to see the location on a map
Click here to leave a comment

Email header

Explains what each bit of the header means, and shows the journey the email took. Click here to show or hide it

Your content is below the advert

The scam

Attn: Beneficiary
I am Mr. Andrew Tweedie, the Finance Department Director of International Monetary Fund {IMF}, writing you in respect of the payment of your over-due fund.
I wish to inform you that your email and Name are among the short-listed beneficiaries that are receiving their fund in this ''Second Quarter Payment of the Year 2019'' by the Finance Department of the International Monetary Fund in respect of the payment of your over-due fund Valued at US$10.5M..
You are therefore advised to re-confirm all your personal details such as full names, address, cell phone number, company name,age, sex and your receiving banking details for the release of your fund to you.
We wait for your immediate response.
Mr. Andrew Tweedie,Finance Department Director,International Monetary Fund.

SpamAssassin Report (spam score: 13.7)


 pts rule                      description                                       
---- ----------------------    --------------------------------------------------
 0.8 BAYES_50                  BODY: Bayes spam probability is 40 to 60% [score: 
                               0.5000]                                           
 0.0 TVD_RCVD_IP4              Message was received from an IPv4 address         
 0.0 TVD_RCVD_IP               Message was received from an IP address           
 1.6 FORGED_YAHOO_RCVD         'From' yahoo.com does not match 'Received' headers
-0.0 SPF_PASS                  SPF: sender matches SPF record                    
 1.0 MISSING_HEADERS           Missing To: header                                
 0.0 DKIM_ADSP_CUSTOM_MED      No valid author signature, adsp_override is       
                               CUSTOM_MED                                        
 0.0 FREEMAIL_FROM             Sender email is commonly abused enduser mail      
                               provider                                          
                               (intern_monetaryfundtransferunit[at]yahoo.com)    
 1.6 DEAR_BENEFICIARY          BODY: Dear Beneficiary:                           
 1.0 PP_MIME_FAKE_ASCII_TEXT   BODY: MIME text/plain claims to be ASCII but isn't
 0.1 DKIM_SIGNED               Message has a DKIM or DK signature, not           
                               necessarily valid                                 
-0.0 RCVD_IN_MSPIKE_H2         RBL: Average reputation (+2) [74.6.134.124 listed 
                               in wl.mailspike.net]                              
-0.0 RCVD_IN_DNSWL_NONE        RBL: Sender listed at https://www.dnswl.org/, no  
                               trust [74.6.134.124 listed in list.dnswl.org]     
 1.6 REPLYTO_WITHOUT_TO_CC     No description available.                         
 0.1 DKIM_INVALID              DKIM or DK signature exists, but is not valid     
 0.0 LOTS_OF_MONEY             Huge... sums of money                             
 1.5 HK_NAME_FM_MR_MRS         No description available.                         
 1.2 MALFORMED_FREEMAIL        Bad headers on message from free email service    
 1.3 PDS_NO_HELO_DNS           High profile HELO but no A record                 
 0.6 REPTO_QUOTE_YAHOO         Yahoo! doesn't do quoting like this               
 0.9 NML_ADSP_CUSTOM_MED       ADSP custom_med hit, and not from a mailing list  
 0.0 MONEY_FORM                Lots of money if you fill out a form              
 0.4 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money          



The email above is most likely a scam but every now and then legitimate emails do come through, as do spam emails which are not attempting to defraud, so please use your judgement

Please do not click on links in the above email or make use of any contact details in the above email.

Comments

Where the scam probably came from



theScamBaiter freight bait archive, theFailure Cole baits   theFAILURE freight bait from theScamBaiter - Cole v2.0   theFAILURE freight bait from theScamBaiter - Rebait at Cole's   theFAILURE freight bait from theScamBaiter - the Martins Cole saga   theFAILURE Butch Driveshaft telemarketer phone baiting   theFAILURE freight bait from theScamBaiter - Anus Laptops commercial made by scammer   theFAILURE freight bait from theScamBaiter - script of Anus Laptops commercial made by scammer