Re: Mail From Thailand
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Sun Apr 6 21:05:58 2014
X-Account-Key: account2
X-UIDL: x
X-Mozilla-Status: 0011
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 188.125.69.156; Sun, 09 Mar 2014 11:49:27 +0000
X-YahooFilteredBulk: 61.56.203.70
Received-SPF: none (domain of ns3.yu-cloud.com does not designate permitted sender hosts)
X-YMailISG: x
X-Originating-IP: [61.56.203.70]
Authentication-Results: mta1005.mail.ir2.yahoo.com from=yahoo.com.hk; domainkeys=neutral (no sig); from=yahoo.com.hk;
dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO ns3.yu-cloud.com) (61.56.203.70)
by mta1005.mail.ir2.yahoo.com with SMTPS; Sun, 09 Mar 2014 11:49:27 +0000
Received: from tdesign by ns3.yu-cloud.com with local (Exim 4.82)
(envelope-from <tdesign@ns3.yu-cloud.com>)
id 1WMB2R-0005n3-S2
for x; Sat, 08 Mar 2014 14:47:15 +0800
To: x
Subject: Re: Mail From Thailand
From: Anti Fraud Unit <msaisha1@yahoo.com.hk>
Reply-To: msaishaala@yahoo.com.hk
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <x@ns3.yu-cloud.com>
Date: Sat, 08 Mar 2014 14:47:15 +0800
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ns3.yu-cloud.com
X-AntiAbuse: Original Domain - yahoo.co.uk
X-AntiAbuse: Originator/Caller UID/GID - [777 775] / [47 12]
X-AntiAbuse: Sender Address Domain - ns3.yu-cloud.com
X-Get-Message-Sender-Via: ns3.yu-cloud.com: authenticated_id: tdesign/only user confirmed/virtual account not confirmed
X-Account-Key: account2
X-UIDL: x
X-Mozilla-Status: 0011
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x via 188.125.69.156; Sun, 09 Mar 2014 11:49:27 +0000
X-YahooFilteredBulk: 61.56.203.70
Received-SPF: none (domain of ns3.yu-cloud.com does not designate permitted sender hosts)
X-YMailISG: x
X-Originating-IP: [61.56.203.70]
Authentication-Results: mta1005.mail.ir2.yahoo.com from=yahoo.com.hk; domainkeys=neutral (no sig); from=yahoo.com.hk;
dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO ns3.yu-cloud.com) (61.56.203.70)
by mta1005.mail.ir2.yahoo.com with SMTPS; Sun, 09 Mar 2014 11:49:27 +0000
Received: from tdesign by ns3.yu-cloud.com with local (Exim 4.82)
(envelope-from <tdesign@ns3.yu-cloud.com>)
id 1WMB2R-0005n3-S2
for x; Sat, 08 Mar 2014 14:47:15 +0800
To: x
Subject: Re: Mail From Thailand
From: Anti Fraud Unit <msaisha1@yahoo.com.hk>
Reply-To: msaishaala@yahoo.com.hk
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
Message-Id: <x@ns3.yu-cloud.com>
Date: Sat, 08 Mar 2014 14:47:15 +0800
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - ns3.yu-cloud.com
X-AntiAbuse: Original Domain - yahoo.co.uk
X-AntiAbuse: Originator/Caller UID/GID - [777 775] / [47 12]
X-AntiAbuse: Sender Address Domain - ns3.yu-cloud.com
X-Get-Message-Sender-Via: ns3.yu-cloud.com: authenticated_id: tdesign/only user confirmed/virtual account not confirmed
Body:
Dear Valued Customer,
We are not sure you received our previous message but we wish to use this
medium to officially inform you that following the ongoing review of all
unclaimed and delayed funds by the United Nations and the World
Bank, your payment file was forwarded to our office for immediate payment of
your long delayed funds starting with a first transfer of US$7,500.000.00
with reference No. TH/FM-95WA, to your bank account.
However, we are surprised to receive another application this morning from
your representative, MR.HANS STEINBICHLER,stating that you authorized him to
transfer the funds to another bank account in Switzerland and that you were
recently involved in an auto accident and cannot walk right now.
Could you please confirm immediately, your relationship with MR.HANS
STEINBICHLER and also, confirm if the bank account in Switzerland as shown
below is now your new bank account information to receive your funds this
week from our paying bank
CREDIT SUISSE, CH-8038 Z?RICH,SWITZERLAND
ACCOUNT NO:0872-456011-91
IBAN: CH55 0487 2045 6011 9100 0
SWIFT CODE: CRESCHZZ8OT
Kindly get in touch with us today by email with your telephone number to
confirm this information to avoid wrong transfer of your funds, so that we
can proceed with the transfer of the US$7,500.000 to your
correct bank account as scheduled.
Yours sincerely,
Mr. James Dobson
Director,Anti-Fraud Unit.
Financial Services Regulation Committee
Plot 33,ATB Way kings drives Bankok Thailand.
We are not sure you received our previous message but we wish to use this
medium to officially inform you that following the ongoing review of all
unclaimed and delayed funds by the United Nations and the World
Bank, your payment file was forwarded to our office for immediate payment of
your long delayed funds starting with a first transfer of US$7,500.000.00
with reference No. TH/FM-95WA, to your bank account.
However, we are surprised to receive another application this morning from
your representative, MR.HANS STEINBICHLER,stating that you authorized him to
transfer the funds to another bank account in Switzerland and that you were
recently involved in an auto accident and cannot walk right now.
Could you please confirm immediately, your relationship with MR.HANS
STEINBICHLER and also, confirm if the bank account in Switzerland as shown
below is now your new bank account information to receive your funds this
week from our paying bank
CREDIT SUISSE, CH-8038 Z?RICH,SWITZERLAND
ACCOUNT NO:0872-456011-91
IBAN: CH55 0487 2045 6011 9100 0
SWIFT CODE: CRESCHZZ8OT
Kindly get in touch with us today by email with your telephone number to
confirm this information to avoid wrong transfer of your funds, so that we
can proceed with the transfer of the US$7,500.000 to your
correct bank account as scheduled.
Yours sincerely,
Mr. James Dobson
Director,Anti-Fraud Unit.
Financial Services Regulation Committee
Plot 33,ATB Way kings drives Bankok Thailand.
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
Reclaim Stolen Funds Scam - YOUR COMPENSATION LETTERLoan Offer Scam - Loans Opportunity.
Delayed Funds Scam - ATTN: DEAR BENEFICIARY,
Reclaim Stolen Funds Scam - THE TRUTH ABOUT YOUR FUND
Paypal Phishing Scam - Attention! Your PayPal Account Could Be Suspended!
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
No we didn't because you never sent it!
Well this is a new take on the 419 scam genre. Instead of boring you out of your mind with some lame story about some guy who died and how they want you to be next of kin, they have everything ready this time and just have to push a button to make you a millionaire. The only problem is, you don't know MR.HANS STEINBICHLER and that is not your Swiss bank account number, hey you don't even have a Swiss bank account, so if everything plays out well you will reply to them and walk right into their trap.
There is no US$7,500.000.00 (is that $7500 and a lot of zero cents or is that 7,5 million bucks? We thought that you normally used a comma as the thousand separator, but hey as a 419 scammer you make the rules). There is also a reason why you don't know Mr Hans Steinbichler, because he doesn't exist.
Well that's only a problem if you type with your feet.
We wonder what they will do if you told them that the banking info was correct and that Mr Hans is really your representative....