Scam Tip Report #96032 - Gift for you. Your response is needed.


Scam ReporterScam Tips Received
Falcons-Fan
Lilburn, GA, United States
2019-06-01 19:11:00
Charity scam
+3 Gift for you. Your response is needed. 
 Scammer
  Information
Name:
Fred & Lesley Higgins
Email Address:
rchmaxw311@qq.com
Country of Scam:
United States (US)
This is an advanced fee scam/charity scam...I also included the full headers. Law enforcement can get them by contacting Scamalot. Please read about the scam below...

SPF: FAIL with IP 64.150.164.71

My wife and I won the Euro Millions Lottery of £58 Million and we have voluntarily decided to donate One Million Euros each, to you and 4 other individuals as part of our own charity project- Read more on the news link below;

thescottishsun.co.uk/news/scottish-news/3013970/lottery-winner-58million-euromillions-fred-lesley-higgins-laurencekirk-aberdeen-ticket-torn-bin

If you received our email, kindly send us the below details so that we can have your €1,000,000.00 EUR (One Million Euros) transferred to you.

Full Names:
Mobile No:
Age:
Address:
Occupation:
Country:

Send your response to: flhiggins11@naver.com

Best Regards,
Fred & Lesley Higgins
Follow Ups/Extra Information. Most recent is listed first.
This is an advanced fee scam...I also included the full headers. Law enforcement can get them by contacting Scamalot. Please read about the scam below...
Attn: ,
Re: Transfer of Funds.
Please be advised that your funds transfer of €1,000,000.00 EUR (One Million Euros) to your designated bank account at Starling Bank has been effected today. Please find as attached to this email in PDF, a copy of the transfer advise to confirm that the transfer has been effected.
You are to contact the local branch of your bank or you may check your balance on-line/ATM on the 5th of May 2019, on or after 12 noon your local time.
Please note that on no account should you disclose the transfer advise copy to anybody until the funds are finally in your account as stipulated. This document carries a privacy security and it is for your eyes only. A swift message and official documentation will be forwarded to your bank from us as soon as the transfer is completed so as to validate the origination of funds.
You are advised to make a payment of €1000.00 EUR (One Thousand Euros) for the Outgoing Transfer Charges before the funds can be fully credited to your account. Once we receive this payment from you, we will send you the swift MT103 which you will take to your bank to confirm the €1,000,000.00 EUR (One Million Euros).
There is no way you can confirm the funds in your account without paying the outgoing transfer fee first.
Due to the Irrevocable bond as invoked on the cash sum by the board, the outgoing transfer fee cannot be deducted from the principal funds. The funds is automatically bonded in the Inter-Bank account, thus we cannot legitimately deduct the required amount {€1,000 EUR} for the outgoing transfer fee.
We shall provide you with the payment details on your request in order to enable you remit this fee as quickly as possible so as to finalize this transfer.
Congratulations on this development as I hope we have used this medium to serve you better.
Mr.Stefan Günter Transfer Unit
PLEASE READ THE USEFUL INFORMATION BELOW...
Use BOTH Bing and Google to search email addresses and phone numbers so you won't get ripped off.
Never use Money Gram,Western Union,Ria to send a fee to strangers. Never buy an i-tunes card,Amazon card(s) or any gift cards to send to scammers.Never use bitcoin and send the wallet/address to scammers. If you do,it is gone for ever. If you must send the money (please don't), insist on Using direct bank transfer only. When you use money gram,western union, all the scammer needs is the control/MTCN number to pick up the transfer,even if he's in Africa and you ask the transfer to be sent to New York. Send the money to a US,UK,Canada, or South Africa bank account only. You could get your money back by following the advice below..
If you send money to this scammer or to any scammer,please In the US... 1.first... file a police report 2. second... file a complaint at www.ic3.gov and include the case number of the police report in the UK... 1.first... file a police report 2. second... file a complaint at www.actionfraud.police.uk and include the case number of the police report

Scam Email
Subject: Transfer of Funds
From: "Stefan Günter" delivered-to: @gmail.com
received: by iva6-161d47f95e63.qloud-c.yandex.net with HTTP; Mon, 03 Jun 2019 11:28:24 +0300
arc-seal: i=1; a=rsa-sha256; t=1559550506; cv=none; d=google.com; s=arc-20160816; b=csncgaLpms7dFnAkwx3y4WMffydDVNR+rXhxhoyNiy...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=message-id:date:mime-version:subject:references:in-r...
arc-authentication-results: i=1; mx.google.com; dkim=pass header.i=@deutschpostbk.com header.s=mail header.b=dkwFCSq3; spf=neutral (google.com: 77...
return-path:
received-spf: neutral (google.com: 77.88.28.100 is neither permitted nor denied by best guess record for domain of st.gunter@deutschpostbk.com...
authentication-results: mxback18g.mail.yandex.net; dkim=pass header.i=@deutschpostbk.com
dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=deutschpostbk.com; s=mail; t=1559550504; bh=lrEp4bozvtx2b4pnQo3/6aHeblMjiP/qohy9Y2AiLOY=...
in-reply-to:
references: <5cf0ca69.1c69fb81.b52b6.ef9eSMTPIN_ADDED_MISSING@mx.google.com> mime-version: 1.0
date: Mon, 03 Jun 2019 09:28:24 +0100
message-id: <18053461559550504@iva6-161d47f95e63.qloud-c.yandex.net>
content-type: multipart/mixed; boundary="----==--bound.1805349.iva6-161d47f95e63.qloud-c.yandex.net"

------==--bound.1805349.iva6-161d47f95e63.qloud-c.yandex.net Content-Transfer-Encoding: base64 Content-Type: text/html; charset=utf-8

Falcons-Fan   (Lilburn, GA, United States) Added the following extra information on :2019-06-03 15:44:19
 Scammer
  Information
Name:
Mr.Stefan Günter
Email Address:
st.gunter@deutschpostbk.com
This is an advanced fee scam...I also included the full headers. Law enforcement can get them by contacting Scamalot. Please read about the scam below...
SPF: NEUTRAL with IP 77.88.28.100
Attn: ,
Re: STANDING ORDER TO TRANSFER FUNDS
Internal memo report has referred to this department by Fred & Lesley Higgins,to proceed with the final transfer of funds €1,000,000.00 EUR (One Million Euros) to your nominated bank account, being the cash funds as approved in your favor.
To enable us honor the payment instruction to your nominated bank account, we demand that you make available the following: ;
* Proof Of identification {via email as a scanned copy} * Bank Name: * Bank Address: * Beneficiary/Account Name: * Account Number: * Sort Code:
It is our normal banking practice, that we shall act within 24 banking hrs after receiving the required details from you the beneficiary of the funds, to enable us effect the transfer of the funds to your nominated bank account.
Please be informed that the transfer to your account shall take 48 banking Hours
We advise your prompt action, as we are hopeful that we can use this medium to serve you efficiently.
Mr.Stefan Gunter Transfer Unit

Scam Email
Subject: STANDING ORDER TO TRANSFER FUNDS
From: "Stefan Günter" delivered-to: @gmail.com
received: by iva7-634c9cb1f49d.qloud-c.yandex.net with HTTP; Sun, 02 Jun 2019 20:46:23 +0300
arc-seal: i=1; a=rsa-sha256; t=1559497585; cv=none; d=google.com; s=arc-20160816; b=t6dAzQtJbU1s+aKrdPzamuFw8Soi8D73ali0eceWoR...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:message-id:date:mime-versi...
arc-authentication-results: i=1; mx.google.com; dkim=pass header.i=@deutschpostbk.com header.s=mail header.b=vUAUK+I7; spf=neutral (google.com: 77...
return-path:
received-spf: neutral (google.com: 77.88.28.100 is neither permitted nor denied by best guess record for domain of st.gunter@deutschpostbk.com...
authentication-results: mxback3j.mail.yandex.net; dkim=pass header.i=@deutschpostbk.com
dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=deutschpostbk.com; s=mail; t=1559497583; bh=ezEUw4tiBte7Qi2dYIXqUJnaQae1OKZd5ljy+CBmNp4=...
in-reply-to:
references: <5cf0ca69.1c69fb81.b52b6.ef9eSMTPIN_ADDED_MISSING@mx.google.com> mime-version: 1.0
date: Sun, 02 Jun 2019 18:46:23 +0100
message-id: <4588591559497583@iva7-634c9cb1f49d.qloud-c.yandex.net>
content-transfer-encoding: base64
content-type: text/html; charset=utf-8

NOBODYLINES

Falcons-Fan   (Lilburn, GA, United States) Added the following extra information on :2019-06-02 19:34:05
 Scammer
  Information
Name:
Mr.Stefan Günter
Email Address:
st.gunter@deutschpostbk.com
This is an advanced fee scam...I also included the full headers. Law enforcement can get them by contacting Scamalot. Please read about the scam below...
X-Originating-IP: 41.203.78.169 Scammer IP Block NIGERIA ISP: Globacom Limited
Dear ,
My wife and I are very happy to hear from you because we believe this is a life time opportunity for you and your family,and we hope that you will use this money wisely and judiciously.We had to make sure our interview was on the internet for the world to see and to definitely prove to you that you are in the right hands. We plan to take care of the needs of our immediate family members and make you a millionaire because we believe in making others comfortable and happy like us.
We were very excited when we knew about our winnings, we hope we can also bring such happiness and excitement to you and your family and also hope you help the poor in your area and contribute also to the charity.
We find it really amazing receiving appreciation gift and emails, a couple of days ago, we got an email from one of the beneficiaries who lives in Cyprus, Mr. Kostas, thanking my wife and I for the cash donation to him and his family. This kind of emails we receive from our beneficiaries gives my wife and I much joy and we are really happy for you, being one of our beneficiaries. Mr.Kostas told us that he received his own funds, though he was a little bit skeptical, but he made up his mind, he trusted us and he followed the bank's instructions, which facilitated the safe transfer of the funds which we donated to him and his family.
I have submitted your Name, Email Address to our pay-out bank(Deutsche Postbank) and the bank's funds transfer department will send you an email to facilitate the disbursement process of the funds 1,000,000.00 EUR (One Million Euros) which was donated to you.
My wife and I humbly urge you to cooperate with our payout bank, Deutsche Postbank (Germany) in other to enhance a smooth and successful transfer of the funds which we donated to you because you are one of our beneficiary who has not yet received his donation money.
Please note that, I and my wife will be going on holiday and will only be able to access our e-mail when will come back, but we have given the full mandate to the bank to transfer your funds to you immediately.
We are very happy and proud to help you and your family and we also suggest that you MUST also get in touch with the bank by e-mail now with the information below for confirmation:
Deutsche Postbank Friedrich-Ebert-Alle 114-126, 53113 Bonn Payment Coordinator: Mr. Stefan Günter Email: st.gunter@deutschpostbk.com
We love you and your family.
Kind Regards, Fred Higgins

Scam Email
Subject: Re: Gift for you. Your response is needed.
From: Fred Higgins delivered-to: @gmail.com
received: from cvsendbo07.nm ([10.112.86.63]) by cvsmtppost007.nm.naver.com with ESMTP id +Wuu6FJLQ5uXpbeNditDog for <@gmail.com>; Sun, 02...
arc-seal: i=1; a=rsa-sha256; t=1559462340; cv=none; d=google.com; s=arc-20160816; b=cAK3hJ5NjWaha9xWAchaeZ2Use0+VgzvgzJR4OxLvf...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=subject:to:importance:references:in-reply-to:from:da...
arc-authentication-results: i=1; mx.google.com; dkim=pass header.i=@naver.com header.s=s20171208 header.b=KxCsDPp4; spf=pass (google.com: domain o...
return-path:
received-spf: pass (google.com: domain of flhiggins11@naver.com designates 125.209.224.228 as permitted sender) client-ip=125.209.224.228;
authentication-results: mx.google.com; dkim=pass header.i=@naver.com header.s=s20171208 header.b=KxCsDPp4; spf=pass (google.com: domain of flh...
dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple; d=naver.com; s=s20171208; t=1559462338; bh=tVJtMwb1dGJlft58pWyL7RxkiXTowSoY1wf3UkCqxic=; h=...
mime-version: 1.0
message-id: <749b44d342cccfaab968deab5cec34@cweb005.nm.nfra.io>
date: Sun, 02 Jun 2019 16:58:58 +0900
in-reply-to:
references: <5cf0ca69.1c69fb81.b52b6.ef9eSMTPIN_ADDED_MISSING@mx.google.com> importance: normal
content-type: multipart/alternative; boundary="-----Boundary-WM=_7fe770bf9700.1559462338915"

Falcons-Fan   (Lilburn, GA, United States) Added the following extra information on :2019-06-02 19:20:59
 Scammer
  Information
Name:
Fred Higgins
Email Address:
flhiggins11@naver.com

 Got more information on this Scam/Scammer?
 Problems with this Report? Let us know


Since you’re here …
we have a small favour to ask. More people are visting Scamdex and Scamalot than ever but advertising revenues are falling fast and we have no 'product' to sell. And unlike many informational websites, we haven’t put up a paywall or membership barrier – we want to keep our site as open as we can. So you can see why we need to ask for your help. Scamdex/Scamalot websites takes a lot of time, money and hard work to keep running. We do this because we hate to see our fellow humans getting scammed out of their hard-earned money by low-lives.
Consider switching off your AdBlocker (if you use one) or contributing directly by one of the links below. Thank you for reading!
Ad Blocker Detected
Our website is made possible by displaying online advertisements to our visitors.
Please consider supporting us by disabling your ad blocker.
Thanks!
Scamdex
PING