Fake High Commission EMail

Interesting Twist

With an interesting twist, this email appears to be from the “good guys”, who are working hard to provide reparations to those internet residents who have been the targets of scams in the past. On the first read, there’s enough prepositional phrases to make you think it’s all legalese, and therefore undecipherable. But if you look a bit closer, you’ll see that the writer just doesn’t understand English well enough to use it correctly. As is my custom, the really obvious parts are highlighted BOLD.

BRITISH HIGH COMMISSION
Metro Plaza, Plot 991/992
Zakari Maimalari Street
Cadastral Zone AO,
Central business district Abuja.
TEL: +234-807-3509305

Attention,
The BRITISH High Commission in Nigeria, Benin Republic, Ghana and Bokinafaso received a report of scam against you and other British/US citizens and Malaysia Etc.The Countries of Nigeria, Benin Republic, Ghana and Bokinafaso have recompensed you following the meeting held with the Four countries’ Government and various countries’ high commission for the fraudulent activities carried out by the Four countries’ Citizens.Your name was among those scammed as listed by the Nigeria Financial Intelligent Unit (NFIU). A compensation has been issued out to all the affected victims and has been already in endorsement to all the victims. Yours was among those that was reported unpaid as at on Friday and we wish to advise you to see to the instructions of the Committee to make sure you receive your compensation immediately.

We advise that you do the needful to make sure the NFIU endorse your payment on Monday. Contact the office of the consular for an advise on how your recompense will be effected to you.

bhcfeedbacckxx@aol.com

Be advised that you should stop further contacts with all the fake lawyers and security companies who in collaboration scammed you. Call +234-807-3509305 immediately to check if the endorsement date suits you.

Yours in Service,

Mr. Bruce Aurthur J.
Secretary:

.
Notice the novel approaches this writer uses. There are two of them. The 1st is assuming the identity of a governmental organization that is going to help you. The NFIU does seem to exist, but the word used in their name is “Intelligence”, not “Intelligent”. And, with apologies to all innocent Nigerians, since they appear to be an “autonomous” arm of the Nigerian government, I would hesitate to believe anything they’d say even if they were legit.

The 2nd, and most important twist is something that’s not even there. And that’s why this email could work. Nowhere in the email does it ask you for any identifying information. Nearly 100% of these fake emails can be spotted just by looking for the request for your information. This one never asks. It just gives you a link to click, to contact the consular office. The consular office with an AOL email address.

Sometimes you just gotta use your brain a moment, and things become clearer….

.

I am Jon, and I am trying to use my brain, if only for a moment.
.

Fake Microsoft Internet Lotter EMail

Where Do I Begin?

This is such a horribly crafted piece of schlock that I almost didn’t include it. Even the subject line is wrong, misspelling the word “lottery”. But still, people might believe that Microsoft really does give away money. Newsflash: They don’t. And it’s “Microsoft Corporation”, not “Company”. I’ve made the really obvious parts in BOLD, but truly, if I bolded everything wrong with this email, the whole thing would be bolded.

Microsoft

You won £1,500,000! Microsoft congratulates you!

MICROSOFT INTERNET LOTTERY

CONGRATULATIONS! YOU WON £1,500,000!

CONGRATULATION! CONGRATULATION!! CONGRATULATION!!!

Microsoft Company gives members random cash prizes. Today, your account is randomly selected as one of 12 top winner’s accounts who will get cash prizes from us. We are happy to inform you that you have won prize money of £1,500,000 (ONE MILLION FIVE HUNDRED THOUSAND POUNDS) for the month of April 2008 lottery win promotion which is organized by Microsoft Company each every month.

Microsoft Company, collects all the mail id of the people that are online on Hotmail & Yahoo ! Mail and all other Email Users, among the millions that subscribe to email users across the world we only select five people every month as our winners through electronic balloting System without the winner applying, we are congratulating you for been one of the people selected. All participants were selected through a computer balloting system drawn from Nine hundred thousand E-mail addresses from Canada, Australia, United States, Asia, Europe, Middle East, Africa and Oceania as part of our international promotions program which is conducted annually.

This Lottery was promoted and sponsored by a conglomerate of some multinational companies as part of their social responsibility to the citizens in the communities where they have operational base.

Further more your details (e-mail address) falls within our British Representative Office in United Kingdom, as indicated in your play coupon and your prize of £1,500,000 will be released to you from this regional branch office in U.K

We hope with part of your prize, you will participate in our end of year high stakes for US$1.3 Billion international draw.

HOW TO CLAIM YOUR PRIZE

These are your identification numbers:-

Batch number……………….Lwh09445
Lotto number………………..Lwh09446
Winning number…………….Lwh09447
Serial number……………….Lwh094478

To begin your claims, You are advised to contact your fiduciary agent with the following details to avoid unnecessary delays and complications:

CONTACT DETAILS OF YOUR CLAIM ADMINISTRATOR

MR. PETER OWEN.

Tel Number +447031832xxx

Fax Number +448704719xxx

Email : mr.peterowenxx@consultant.com
: mr.peterowenxx@yahoo.com
: mr.peterowenxx@googlemail.com

CONTACT DETAILS OF YOUR CLAIM ADMINISTRATOR

You are required to forward him with the above winning details. As soon as you contact your Claims Agent, he will advise you on what to do in order to get your prize money. (Congratulations once more!!)

For security reasons, we advice all winners to keep this information confidential from the public until your claim is processed and your prize released to you. This is part of our security protocol to avoid double claiming and unwarranted taking advantage of this programme by non-participant or unofficial personnel.

Yours Sincerely,

Dr WILLIAM GERRI (PHD)
LOTTO CO-ORDINATOR.
MICROSOFT INC

NB: PLEASE DO NOT REPLY TO THIS EMAIL BECAUSE YOU MIGHT NOT BE ATTENDED TO, KINDLY CONTACT YOUR FIDUCIARY AGENT DIRECTLY FOR FURTHER DIRECTIONS. Microsoft

Registra tu dominio en http://dominios.ya.com/. Con cada registro te regalamos 20 cuentas de correo de 100MB cada una
Ya.com ADSL 24h + Llamadas Nacionales y Locales 24h – desde 9,95 €/mes+IVA.

You can see how horribly this fake email is thrown together. All the usual suspects are present, including the footer that the sender’s ISP appended to the email, advertising broadband access. Makes you wonder how these guys make any money at all…

I am Jon, and this certainly isn’t from Microsoft.

.

Fake Sithole Investment EMail

Almost, But Not Quite

Many email scams are easily spotted. In today’s webworld, nearly all scammers are still getting their on-the-job training in. As they work their scams, they learn what works and what doesn’t. Eventually, email scams will mature and it will be harder to spot them. This one is almost convincing, but it’s still not quite right. Let’s see why… scam flags are in bold.

102 OXFORDWEG,
RANDBURG,
JOHANNESBURG,
SOUTH AFRICA.
From Mr. Walter Sithole
Tell: +27-78-000-12633.
Fax: +27-843-000-401

INVESTMENT INQUIRY
Dear Sir ,
I am a member of the “Contract Award Committee”, Federal Ministry of Mining and Energy Resources, Republic of South Africa. I and My colleagues are in search of an individual or Company who will assist us to transfer a reasonable amount of Ten Million Six hundred Thousand US Dollars (US$10.6M) and subsequent investment of same in lucrative ventures in your country. You will receive this fund as an applied contractor.

For your support and partnership, please reply for motto negotiates your percentage will be paid when the funds arrive in your bank account. You must however note that this transaction, with regards to our disposition to continue with you, is subject to these terms. Firstly, our conviction of your transparency, Secondly, that you treat this transaction with confidentiality. Finally and above all, that you will provide an account for which you have absolute control. Should you not have an account; our financial services coordinator will direct you to open an online account at the appropriate time.

I am looking forward to doing business with you and do solicit your confidentiality in this transaction, Please email your response to our private mail box for more confidential waltersitholesxyz@yahoo.co.uk, or send us fax with the above numbers, for us to update you with further details and our plans as to how we intend to actualize this transaction. Also provide us with your telephone and fax number so that we can reach you for further deliberations.

Sincerely Yours

Mr. Waltersithole
You are invited to Get a Free AOL Email ID. Click here.

.

We don’t find many glaring errors in this one, but the ones we find pack a knockout punch. The 1st paragraph shows a bit of confusion about when to use upper case letters. The “assist us to transfer” part is also grammatically wrong. But these are mistakes any high school graduate could make in the USA. The really big mistake appears in the 2nd paragraph. What in the world does that 1st sentence even mean? So even if you got through the 1st paragraph with no suspicions, that sentence just clued you in. Interestingly, the only other real error in that paragraph deals with upper cases after a comma which should have been a period. In the last paragraph we see that error repeated, and a badly phrased sentence about the “private email”. Assuming we missed the confusion of the 2nd paragraph, the clincher appears in the signature. Anywhere in the world, I think we are all vain enough to at least get our name right…. not to mention, the AOL link appended to the bottom. I’d bet that the sender didn’t even realize that would be there. Seems to me that a government office would have its own email domain?

The fake Sithole Investment email is an example of how these guys are getting better, incrementally, in their craft. Except for the horrible sentence in the middle of it all, it’s written well enough to generate what I’ll call a “surface appeal”. On the surface, it seems plausible. But scratching just a little at the premise releases the stench of the scam. All you need to realize is that governments engage in overseas investing every day, and they use professionals to “actualize” these transactions. Unless you’re a player in that game, why would they be wanting you to help?

Sometimes, you don’t have to know who They are.
All you have to know is who You are.

.

I am Jon…well, actually, I am J.O.N.
.
.

Fake Nkosi Email

Way Too Easy

The Nkosi email is a good one. The writer has some command over the English language and, one could even argue, since he states up front that he’s from South Africa, most of his errors lend more believability to the scam. But it’s not so much grammar that exposes this scammer. There are some other clues that shed light on his dark designs.

Sometimes you can see it before you even look at the what the email says. For instance, look at the “from” line. The only part that matters is the part just before the “dot com”, in this case, “opentransfer.” That means that the guys who sent this are really from “opentransfer.com”, and not “yahoo.com”, as they lead you to believe. I’ve seen opentransfer.com mentioned in lots of spam forums, and they’re pretty well-known. So we find out in line 1 that we’re being lied to. That’s just way too easy.

It’s important to say that opentransfer.com may have nothing to do with guys who are doing the spamming and scamming. Of course, the flip side of that is, why are they allowing this illegal activity to take place on their servers? Let’s leave that, and get back to the email…

from: g_nkosixyz@yahoo.mailxyz.opentransfer.com
reply to: g_nkosixyz@yahoo.com
to: “undisclosed-recipients: ;”


But wait, you say. The “reply to” address is from Yahoo.com! Of course it is! Spammers and scammers are getting pretty sophisticated nowadays. But their limited haxorz skillz are at best, terrible. They don’t even bother trying to hide the original “from”. That wouldn’t be so hard to do. What’s interesting about this one is that later on, you’re encouraged to use a different address to respond. Finally, we see that the email is addressed to: “undisclosed recipients”. That’s almost always a bad sign.

FROM: DR GREG NKOSI
South Africa Civil Aviation Authority
Private bag X 73,
Halfway house 1685,
TEL: +27 84 781 9295
Alternative email: gregnkosixyc@yahoo.com


Notice here yet another email address, this time listed as “alternative”. Okay, enough about addresses for a minute, let’s check out this well written scam… I’ll bold out some of the most blatant errors.

PROPOSAL FOR TRANSFER OF TWENTY EIGHT MILLION, FIVE HUNDRED THOUSAND US DOLLARS
(US$28.5M) INTO YOUR NOMINATED BANK ACCOUNT

I need your reliability and trustworthiness in this transaction; I am the
financial controller of South Africa Civil Aviation Authority, and Secretary to the Contract Award Committee of my department. I have concluded arrangements with a bank director, to transfer out of this Country this US$28.5 million dollar for investment purposes. This Fund is from an over inflated invoice, arising from a contract awarded to one of our Aviation Authority contractors.

The contract has already been executed and the original contractor has been fully paid. So I have decided to transfer out of this Country 28.5m, which is the balance of the contract fund. Because of my position in the office and for the fact that I am a South Africa, it will not be possible for me to transfer such huge amount of money on my name, because, there will be a lot of question from the authority on the origin of this fund. Consequent to this reason, I require the assistance of a Foreigner, who will present himself as the contractor and beneficiary of this amount: US$28,500,000.00 (Twenty Eight Million, Five Hundred Thousand US Dollars), which will be transferred into your nominated overseas account.

I have deposited this Money with a reliable Security Company as a family valuable what twenty eight million five hundred thousand dollar for safekeeping. Moreover, this money is already covered with South Africa Civil Aviation Authority contract and completion numbers, which of course makes it easier for us to affect this transfer on your name without any questions being asked. So, this is why I need a foreigner, who will stand and act as one of our Civil Aviation Contractor to claim this fund.

As the Financial Controller, I will assist you to procure the contract completion certificate that will back up your claim as our contractor. I will also monitor the immediate remittance of the above amount. You would however, be required to furnish me with these necessary information?s to enable me install your information?s into our computer data base system as one of our contractors.

1.Your direct phone and fax numbers for easy communication
2. Your home and office address,
3. Photocopies of your Identification, i.e. your Drivers license, your
international passport or your national ID.

The information?s will enable me procure the contract certificate for the claim of this fund. This process will last for ten working days only. For your kind assistance I have decided to offer you 30% of the total amount, for providing to me your banking details where you would like this fund to be transferred and for your kind assistance, 5% has been map out for any expenses that we might incur during the process of this transfer. While the remaining 65% will be for my investment purposes, which I would seek your guidance to introduce to me a profitable business in your Country, because I have never been into any commercial business all my live. The banker has assured me that this transaction would be 100% risk free.

Thanking you in anticipation of your most urgent and positive response.

Yours faithfully,
DR.GREG NKOSI

NB PLEASE RESPOND TO ME THROUGH MY PRIVATE EMAIL ID( gregnkosixyc@yahoo.com)

I’m going to ignore the points and go straight to the glaring red flag. This email is asking you to help someone steal a rather large sum of cash. If you reply to it, you probably deserve what happens to you. And what would that be? Well, if you send in photocopies of your identification, your identity is sure to be sold for about 250 US dollars. It’s the picture ID’s that jack the price up so high. What happens then, takes years to clear up.

But you’re an honest person, and would never have helped this guy anyway. Even if he were being honest. Right?

.

I am Jon. Who are you?

.
.

Fake Twang Kidney Cancer EMail

EMail Love

I’ve received a few emails from readers who are actually enjoying reading through this “fake email” series. Honestly, I was posting them because I had so little time to do any in-depth pieces lately. But since people seem to like them, and there are numerous search hits every day, I’ll do a few more.

Today we’re looking at a pretty well-crafted example. Usually, their are some really obvious grammatical errors that just practically scream “SCAM!” at you, but this one is low key and almost believable. To a trained eye, however, it never had a chance. For instance, look at the way it begins:

Dear Beloved,


“Beloved”? Seriously, only one person should ever call you that. Unless you’re at a wedding and the preacher is beginning the ceremony.
Let’s read on a bit…

I apologized if the content here is contrary to your ethics, but I had to reach you through this medium. I came across your personal contact via international personal research profile in my Earnest search for a trustworthy and honest person to handle my business.
I am Douglas Twang. 61 years old. I have been diagnosed with kidney Cancer a Disease that has defiled all forms of medical treatment, destroying my heart and kidney. My doctor’s report indicates that I have but only a few months to live. At this stage money is no more my priority except to assist someone in need of help. Why work when there is nothing to live for. I am a wealthy man, but right now some of my properties and investment are being diverted or confiscated by Family members and business associates. And I realized that I have to make trade-offs.


You can see what I mean about the grammar here. It’s almost believably written. There are some mistakes that need to be brought out, though.
In the 1st sentence the word “apologized” is past tense, which could have been a slip of the finger on a qwerty keyboard, meaning anyone could have made that honest error. It’s an error nonetheless, and is probably caused by the writer using the word “had” later on in the sentence. Helping verbs are notoriously hard to learn, even if English is your natural language.
The next error is the capitalization of the word “Earnest”. That whole sentence just sounds wrong when you read it aloud. People just don’t talk that way. The words convey a concept, but not in the normal English progression. The “via international personal contact” phrase is just wrong.

As a mission to fulfill my commitments to affect lives, I have in deposit with a financial Institution huge cash deposit set aside, which I intend to distribute to charity through you. You will receive 30% for your support. I have earlier contacted a South African Woman, but later discovered she lacked the capability to handle such amount for distribution, but if you have the capability I shall be willing to release the funds to you. Despite my adversity and dismay, with your support I can achieve this final purpose by the grace of God. Contact me via my private email: douglas_twang06@(obfuscated)


Once again, not-so-obvious mistakes show this email to be a scam. Leaving out little words like “a” is a dead giveaway. Also, notice the way the capitals appear in the phrase “financial Institution”. The biggest mistake this guy makes is in the next sentence, though. There is absolutely no reason to include that bit about the “South African Woman” if this letter was legit. So why is it included? It’s the setup for a very old sales tactic, which I call the “You can’t have it” clause. I learned it when I was selling Ford trucks in Albuquerque. Briefly, it goes like this: Generate interest by displaying value, then remove the opportunity for ownership based on a perception that the buyer isn’t “blank” enough to have it. Insert “rich” or “capable” for “blank”. Here, our would-be scammer offers 30% of an undisclosed sum, presents a prior case where a candidate had no capability, and then made the offer contingent on that capability. At this point, the 1st offer to “close the deal” is made, which is one reason why the email link is placed at that point in the email. Every salesman knows you need to say yes more than once to actually buy, so here is your 1st “chance” to say yes.
The other reason for that email link, and this is IMPORTANT, is that if you click that link, you have verified that there is a real person at your email address. These emails are spammed out. Many actually go nowhere, because the address doesn’t really exist. Once our guy here knows that your email is valid (by your reply), he can sell it to other spammers for a profit. It’s not the profit he’s after, mind you, but he’ll take what he can get. To find the real profit he’s looking for, let’s read on a bit further.

I have in safekeeping every document that will facilitate the released of this bequest with the finance Company. My health has deteriorated real badly, that I cannot do this myself anymore. My contacting you is divine and my faith is in God. More details will be communicated to you once you indicate your intention to assist.


Sorry to interrupt, but did you notice the verb disagreement in that 1st sentence? And the strange caps use in “finance Company”? How about the incorrect use of “real badly”? I particularly love the invocation of the “divine” and “God”. We’re basically being told that God led this man to us.

Please send me your contact information as:

Your full name
Address.
Telephone number and fax.
Nationality.
Age.

I will not contact any other person until I hear from you.
God bless you for anticipated support.

Regards,
Douglas Twang.

And now we know what this guy is really after. He wants to sell our identity! Name, address, phone number… all the usual stuff. An American identity with the features included as requested above is estimated to be worth between $25 and $80. This guy doesn’t want your identity. He wants to sell your identity. It’s much less risky to him, and anything he makes is all profit, anyway.

I am Jon. I work for you.

.
.

Fake Powerball Lotto EMail

A Good Fake

Here’s a fake email that stands out from the rest. This one is more tightly crafted, showing a better than usual command of the English language. At the first cursory glance, it’s almost believable. But it doesn’t stand up to scrutiny. There are just too many mistakes in it to be believed.

Nevertheless, I’d say this guy gets more fish than the average scammer. Let’s check it out. Once again, I have made the pertinent parts BOLD.

POWERBALL LOTTO. BV
POWERBALL-WHEEL E-GAME 2008

Dear Consolation Prize Winner,

NOTICE OF CONSOLATION PRIZE WINNING

This email confirms that you have been notified of by the POWERBALL INTERLOTTO BV The Netherlands of your email lottery winning for 2008 PowerballLotto-Wheel E-game held on 2nd January 2008. We wish to congratulate you on the selection of your email coupon number which was selected among the 4 lucky consolation prize winners.

Your email ID identified with Coupon No.PBL2348974321 and was selected by Electronic Random Selection System (ERSS) with entries from the 50,000 different email addresses enrolled for the Lotto-Wheel E-game.Your email ID included among the 50,000 different email addresses where submitted by our partner international email provider companies.For security reasons,you are advised to keep your winning information confidential till your claims is processed and money remitted to you in the manner you deem fit to claim your prize.This is a part of our precautionary measure to avoid unwarranted abuse of this program by some unscrupulous elements.

Prize Ref No.: PBL/CN/6654/CP

Lottery Group: Consolation Prize Group

Prize Amount: US $500,000 Five Hundred Thousand Dollars Only

You are required to file claims for your lottery prize winning by contacting the Lottery Claims Processing Officer with your winning information provided above.

Lottery Claims Officer:

Name: Mrs Stella Coles

Email; stellacoless5@hotmail.com

Tel: +4470-4571-2347

Congratulations once again from all our staffs on your consolation prize winning, we hope you will partake in our forth coming Power ball Lotto-Wheel Email-games.

Yours truly,

Mr.Andrew Patrick,
(Lottery Coordinator)
(Online Promo Programme).

All things considered, this appears to be one of the better scam related emails I’ve ever seen. But once again, since most of these scams originate in other countries, the nuances of English grammar usually give them away. In this one, the space after the comma or period seems to elude our would-be scammer more than anything else. That, and the misuse of “staffs” instead of “staff” (which would be the normal English way of writing that), and the misuse of “forth coming” instead of “forthcoming” and “where” instead of “were”. Notice the noun/verb disagreement in the “claims is” combination. As you can see, these are nuances that many people raised in America or Great Britain might miss. But once again, knowing the grammar saves the day.

Remember that day you looked at the teacher and said, “Why do we have to learn this stuff? What will we ever need to know it for?”, and the teacher didn’t have a good answer? Well, now you know. You needed to learn it to protect yourself from online predators who would steal your identity. Isn’t that a strange twist?

I am Jon, and grammar is my friend.

.

Fake Prayers EMail

Mr. Jim Peter….s

This is an interesting variation on fake emails. The spelling and grammar are not too awfully bad, mostly just punctuation errors. But there are some things which stand out and mark it as a fake. You’ll notice that there’s no explanation why this guy wants to send you money. To make it easy, I’ve made the really stupid parts BOLD. Let’s follow along:

My Dear,

I crave your indulgence at this mail coming from somebody you have not known before but I believe I have been destined to be of blessing to you.

Anyone you don’t know, who sends unsolicited emails speaking about “destiny”, should make you suspicious. Most of the rest of this email is just full of bad grammar. See if you can find some mistakes I missed…

I am Mr.Jim Peters. former director of Benin Cement Company.I am presently in Spain where I am under going treatment.

I want you to contact my secretary in Benin Republic,her name is Mrs.Jones Koffe using her email address mrs.jones_koffe@yahoo.it or telephone +229 93 48 98 58.

Instruct her to send you the sum of ($800,000) Eight Hundred Thousand United States Dollars in Cashier Check which I kept for you.

I cannot predict what will be my fate by the time you will receive the fund seeing that I am in a very critical condition here in the hospital that is why I ask you to assist me in your prayers.

Mr.Jim Peters.

That email was followed up the very next day with this email, again from Mr Peters, even though this time his last name is missing the ending “s”. He even refers to his other attempt at scamming to make himself seem more familiar. Check him out, as he tries to wrap up this deal:

Dearest friend,
Season Greeting from.MR JIM PETER, who contacted you long ago,I am very happy to inform you about my success in getting that fundNow,I want you to contact my secretary on the information below:
NAME: Louisa Christopher.
EMAIL: (lbchrist_700@hotmail.com)
Ask him to send you the total sum of(US$1.250.000.00) ONE MILLON TWO HUNDRED AND FIFTY THOUSAND USD CASHIER.
CHEQUE
which I kept for your compensation,CONTACT THE SECRETARY ON thisemail: lbchrist_700@hotmail.com
send him your contact information like.
Your Full Name
Your Home Address
Your Phone Number
Your Occupation
Your Country
Your Age
Sex
Regards
MR JIM PETER

CONTACT MY SECRETARY

Other than the fact that he now has a new secretary, which may be a man with a woman’s name, there are just too many grammar errors to take this guy seriously. Notice how our monetary bait has increased to over a million dollars, and that now it is “compensation”. I have to ask myself, “What did I ever do for this guy that was worth a million dollars?” The answer: Nothing! And I never will.

EMail marked as junk and deleted. I suppose Mr Peter(s) will have to use a different machine on his botnet to get to me again….

I am Jon, and that up there is Mr Peter(s)…not.

.
.

Fake Camelot Lottery EMail

I Won!

Here’s one that showed up this morning in my email. It appears that I have won the lottery! Interestingly, I have never bought a lottery ticket in my life. Nevertheless, it seems that I’ve won, over in… England?

Below is the email I received, with a little commentary.

The Camelot Group.
Operators of the National UK Lottery.
3b Olympic Way, Sefton Business Park,
Aintree, Watford , L30 1RD
REF N0: UKL/74-A0802742006
BATCH NO: 2006UKL-01

LOTTERY WINNING NOTICE


(so far it seems okay)

Congrats,

(Congrats?? That doesn’t sound so right… maybe there’s more stupid stuff down below! I’ll make some of the stupid stuff BOLD so you’ll catch it as you read.)

The United Kingdom National Lottery wishes to inform you that the results of the E-mail address of the ballot lottery international program(Bad Grammar) will be held five times every year. Your email account have been picked(Grammar, again) as a winner of a lump sum pay out of Eight hundred and Sixty Thousand Great Britain pounds(Upper Case Anyone?)860,000,00(How many zeros after that last comma?) pounds sterling) in cash credited to REF: UKL/74-A0802742006. This is from total prize money of GBP £4,459,670.00 shared among the FIVE (5) international winners in this category.
please
(Caps?) quote your reference/batch numbers in any correspondences to our selected claim agent. Congratulations once more from all members and staffs(Staffs?) of this program, before(Comma or Period?) your claim agent could get this fund transferred into your account, He have to obtain(“he have to..”) a CERTIFICATE OF CLAIM AND INSURANCE CERTIFICATE from the Ministry of Justice of United Kingdom on your behalf; this is to certify you as original beneficiary(somebody died?) of the winning fund. Therefore we will need you to send him these Details listed bellow(spelling counts!) to obtain the Certificate and insurance of Claim and for the authentication of your fund documents into your name and as to enable you alone to have access to this fund in any of the bank account of your choice in your country.(That whole paragraph just reeks of WRONG)
Here are the details

Your REF N0
Your FILE BATCH NO
Your full name.
Your full address.
Your private telephone, mobile and fax numbers.
Your country of origin.
Your date of birth.
Your Occupation.
Your Sex.
Your Marital status.

(And there’s the stuff they really want. Stuff that let’s them take your identity..)

To begin your claim, please contact your claims agent :

Name : Mr DOUGLAS DUKE
Mobile: +447031821203
Email : douglasdukeagent@gmail.com

Congratulations again from all our staff and thank you for being part of our promotions program.
Sincerely,

Mrs. caroline owen,(No CAPS in names)
Online Coordinator,
CAMELOT GROUP,
Operator of the National Lottery.

Nuova grafica e nuove funzionalità! Crea subito Gratis la tua nuova Casella di Posta Katamail
Nuova grafica e nuove funzionalità! Crea subito Gratis la tua nuova Casella di Posta Katamail

(Shouldn’t the pc that sent this email about the British lottery include a footer in English?)

It impresses me that these guys even try. What impresses me more is that some people will fall for it. Applying a simple rule will always protect you from these types of scams. The rule? Look for the right grammar. If someone has risen to a position responsible for notifying the public about Anything, you can bet that person can apply the most basic grammatical rules to their correspondence. If there’s one mistake, my eyebrows are raised. If there’s more than one mistake, I know it’s a scam, regardless of anything else.

.

I am Jon, and that up there is a horribly crafted attempt to steal my identity, and maybe yours.

.

Fake Hitman EMails and IM’s

Hitman

This isn’t a new scam, but it seems to be getting some play lately, so I thought I’d clue you in on it. Back in January 2007, the FBI published a story with the headline “ONLINE EXTORTION E-Mail Scam Includes Hit-Man Threat”. In it, an online extortion scheme is exposed and some advice is given on how to react if someone tries to pull this one on you. I’m going to extensively quote this part of the story, because it shows very plainly how this scam can incorporate information from social networking sites to make the victim think the scam is real.

In one case, a recipient responded that he wanted to be left alone and threatened to call authorities. The scammer, who was demanding an advance payment of $20,000, e-mailed back and reiterated the threat, this time with some personal details about the recipient—his work address, marital status, and daughter’s full name. Then an ultimatum:

“TELL ME NOW ARE YOU READY TO DO WHAT I SAID OR DO YOU WANT ME TO PROCEED WITH MY JOB? ANSWER YES/NO AND DON’T ASK ANY QUESTIONS!!!”

Bill Shore, a special agent who supervises the computer crime squad in the FBI’s Pittsburgh field office, said recipients should not be overly spooked when scammers incorporate their intended victims’ personal details in their schemes.

“Personal information is widely available,” he said. “Even if a person does not use the Internet or own a computer, they could still be the victim of a computer crime such as identity theft…

.

… The new extortion e-mails vary in style and content and generally contain misspellings and some broken English. But the underlying message appears to be the same: pay the sender or risk the alternative. A scam e-mail in December said as much:

“I have followed you closely for one week and three days now … Do not contact the police or F.B.I. or try to send a copy of this to them, because if you do I will know, and might be pushed to do what I have being (sic) paid to do.”

IC3 recently noted a new twist in the scam. Now e-mails are surfacing that claim to be from the FBI in London and inform recipients that an arrest was made in the case. The e-mail says the recipient’s information was found on the suspect and that they should reply to help further the investigation. This, too, is a scam. ”

01/15/07

.

Essential Networking

Most of us are members of at least one social networking site. I have accounts at LinkedIn, MySpace, Facebook, Twitter, and MyBlogLog, just to name a few. Each of these is a network, and every network contains certain detailed information about me. Someone with devious purposes could try to use that information against me at any time.

This is not to say that I plan to close out my accounts with all my social networking sites, or recommend that to you. At this point, it seems like I wouldn’t get by without some of them. Your situation is probably similar. Some of those sites are important to me, being if not the only means of communication, at least the easiest that I have with some people. Even close friends.

So that’s not what I’m saying. I’m just reminding you that nearly anyone can grab all kinds of personally identifying information from many social networking sites. And with that info, they can try to manipulate you or harm you in some way. There’s really no hard and fast advice to follow, except this. Be diligent. Be awake. Know that the threats are there. If someone sends you a questionable email, copy and paste a snippet of it into Google and see if anybody else has gotten it. You can learn alot by searching a little. What you do with that is your business.

I am Jon… or am I?

.
Hitman
More info about this scam at GeeksAreSexy

Fake: IRS Refund For Your VISA or MasterCard!

The following is a copy of an email I found in my Junk EMail. I always go through it in case there’s an old friend or something that I might actually want to see. Usually it’s a necessary waste of time. But I thought you might like to see this.

Notice that the return address seems to go right where it ought to go: irs dot gov. If you type that into your address bar you will go to the US Internal Revenue website. But right after that is where the 1st tip-off is found. See all that “Add to Address Book” stuff? Trust me, the government could care less whether they are in my address book. And they certainly don’t want to be in my phone…or do they?

Looking at the subject line, we find that there is a “Tax Refund” on my VISA or my MasterCard. Hmm, they don’t know which one? That is clue #2. Come along and I think in the end we’ll have a bit of a giggle:

 

From: “Internal Revenue Service” <refund@irs.gov> Add to Address BookAdd to Address Book Add Mobile Alert
Subject: Notification of Tax Refund on your VISA or MasterCard Now
Date: Thu, 29 Nov 2007 10:48:06 -0500

> Notification of Tax Refund on your VISA or MasterCard Now,

> After the last annual calculations of your fiscal activity we have
determined that you are eligible to receive a tax refund of $329.30.


Hey, cool! I could use $329.30 right about now. What perfect timing!


>A refund can be delayed for a variety of reasons.
Fox example submitting invalid records or applying after the
deadline.


Wow, I didn’t submit any invalid records! Sure hope the deadline hasn’t passed… It was nice of them to include that “Foxy” example, just so I would know what to look for…


> Sorry for any inconvenience this may cause and thank you for your
patience.


Gee, these are the nicest IRS guys I’ve ever heard of!


> To access the form for your tax refund please copy/paste the link
below in your browser (or click the link below)
http://hostxxx-xxx-235-101.ixxxxxxxxxxxxxxxxx/xxxxxxx.php

ok, nobody use that link, ok???

Huh? “host217-36-235-101.in-addr.btopenworld.com:84/”? Is the IRS outsourcing their refunds?


> Note: For security reasons, we will record your ip-address, the date
and time.
Deliberate wrong inputs are criminally pursued and indicated.


Well, guess these guys aren’t so nice after all! Or very bright, either. I wonder how far they plan to pursue me. And how, exactly, will they indicate me? And for what?


Regards,

Internal Revenue Service

© Copyright 2007, Internal Revenue Service U.S.A.

YLJCUUZGQFEMHHZMZPUQGGDZIXWKXKRPBPMPUT

 

I especially like all the seemingly random letters at the end. I guess they were trying to imitate a hash of some sort? Who knows?

Well, we had ourselves a little chuckle here, but the sobering thought is that somewhere, somebody believed this. I can only hope they haven’t lost alot of money over it. We are gullible, people. Maybe not me or you, maybe not this time, but sometime or the other we just choose to believe, regardless. Given just the wrong circumstances, the right motivations, we can be fooled.

Let’s all be careful out there. And in here.

I am Jon, and I am indicated.