Scam Tip Report #95767 - Donation Update


Falcons-Fan
Lilburn, GA, United States
2019-05-09 19:55:16
Nigerian/419 Scam
+2 Donation Update 
 Scammer Information
Scam Website:
Fax:
Country of Scam:
United States (US)
In regards to my last email i want you to know that your donation of $2,000,000 is still very much on pending kindly get back so we can proceed further that is if you are still very much interested.
Follow Ups/Extra Information. Most recent is listed first.
This is an advanced fee scam...I also included the full headers. Law enforcement can get them by contacting Scamalot. Please read about the scam below...
NATWEST BANK AND FINANCE GROUP PLC. 24Hours Online-Banking Service Address: 14 High St, Wigton CA7 9WY, United Kingdom. Customer Information Service Telephone No.: +44 (7700)-305-877
Dear ,
Thanks for contacting NatWest Bank.
You will have to register a new bank account with NatWest Bank for your online transfer to be successful{via Online Banking} to your wish destination.
You have to fill attached Individual Account Opening Form and return back, so your new bank account can be created and credited immediately with $2,000,000.00. Then you can transfer your $2,000,000.00 USD from your Natwest Bank Account to your Bank Account yourself without any delay.
You have to TICK on CURRENT ACCOUNT when filling attach account opening form.
Looking further to your reply.
Mrs Grace Walker. Natwest Bank HQ Wigton CA7 9WY, United Kingdom.

Scam Email
Subject: Individual Account Opening Form
From: NatWest <customercare@mynatwest.com> delivered-to: @gmail.com
received: from [::1] (port=41364 helo=server139.iseencloud.com) by server139.iseencloud.com with esmtpa (Exim 4.91) (envelope-from <custom...
arc-seal: i=1; a=rsa-sha256; t=1557429892; cv=none; d=google.com; s=arc-20160816; b=SA62hvTSNma47LNzF7XyV9WBfY6/6AKbXg6sCtFlDB...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=user-agent:message-id:references:in-reply-to:organiz...
arc-authentication-results: i=1; mx.google.com; dkim=pass header.i=@mynatwest.com header.s=default header.b=ZU6JydqW; spf=pass (google.com: domain...
return-path: <customercare@mynatwest.com>
received-spf: pass (google.com: domain of customercare@mynatwest.com designates 193.111.199.176 as permitted sender) client-ip=193.111.199.176...
authentication-results: mx.google.com; dkim=pass header.i=@mynatwest.com header.s=default header.b=ZU6JydqW; spf=pass (google.com: domain of c...
dkim-signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=mynatwest.com; s=default; h=Message-ID:References:In-Reply-To:Subject:Cc:To :...
mime-version: 1.0
content-type: multipart/mixed; boundary="=_cb53bbc247a7ca56fe8332a213c724a6"
date: Fri, 10 May 2019 00:54:51 +0530
cc: @gmail.com
organization: NatWest
in-reply-to: <e3a7ce644df773f0ade8abe9744a7caa@mynatwest.com>
references: <!&!AAAAAAAAAAAYAAAAAAAAABMEmMHFVhNJlRL1v1OVCvvCgAAAEAAAAMYDsKhtUqVDtSJ1yzedvVQBAAAAAA==@vodamail.co.za> <e3a7ce644df773f0ade8ab...
message-id: <0c6f033ea850797d083ca2cb8e8ee5cf@mynatwest.com>
user-agent: Roundcube Webmail/1.3.7

Falcons-Fan   (Lilburn, GA, United States) Added the following extra information on :2019-05-09 20:03:41
 Scammer Information
Scam Website:
Fax:
This is an advanced fee scam...I also included the full headers. Law enforcement can get them by contacting Scamalot. Please read about the scam below...
Greetings, and I hope you doing fine? It is good you have responded in time, and I am glad that you can be benefited by this money. I hope this money will be a blessing to you. It touches my heart to reach out to people far and unknown. I thought it would be a different form of doing good apart from my commitments in my foundation. I believe this type would benefit more.
Please do not make a public show or media representation of this, as I do not want to be plagued by countless demands.. To complete this arrangement, you are now required to contact my designated Transferring bank where i invested and kept some of my personal wealth, I have fully informed them about you and they are looking forward to your email.
You are to pay for the charity registration fee, and the fee is very compulsory because you are going to be part of our Charity Foundation immediately you received this donation cash. The Bank is going to instruct you on how to send the payment once you contact them. Please do not use this money for Drug traffic. You have to invest well and be a blessing to others. The Charity Registration fee, is the only fee you are to send to the bank, and you are advice to contact the bank now so that they can instruct you on how to make the payment and for them to transfer the 2,000,000.00 USD Dollars to you.. Find Below the contact details of the bank and you are to contact them as soon as possible
Bank Email: customercare@mynatwest.com Management

Scam Email
Subject: Re: Donation Update
From: Azim Hashim Premji <hashimazim.premji@gmail.com> delivered-to: @gmail.com
received: from mail-sor-f41.google.com (mail-sor-f41.google.com. [209.85.220.41]) by mx.google.com with SMTPS id b17sor1886975lji.40...
arc-seal: i=1; a=rsa-sha256; t=1557426651; cv=none; d=google.com; s=arc-20160816; b=RPjM5+d1C5fNQUkm9509UfNbFuaaQK9hiKSh71iCeJ...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=to:subject:message-id:date:from:in-reply-to:referenc...
arc-authentication-results: i=1; mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b="OautAv/p"; spf=pass (google.com: domain ...
return-path: <hashimazim.premji@gmail.com>
received-spf: pass (google.com: domain of hashimazim.premji@gmail.com designates 209.85.220.41 as permitted sender) client-ip=209.85.220.41;
authentication-results: mx.google.com; dkim=pass header.i=@gmail.com header.s=20161025 header.b="OautAv/p"; spf=pass (google.com: domain of ha...
dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:messa...
mime-version: 1.0
references: <CADHp2UDXtQ-jqRGLw17SxCizrOjJsQXSxdpF62pngPSUkvFNkA@mail.gmail.com> <CANqK3KOJfWG=Q-d2oRh5WjwHzxRPGcxX6nz3qsGF=CntvUM5hQ@mail.g...
in-reply-to: <CANqK3KOJfWG=Q-d2oRh5WjwHzxRPGcxX6nz3qsGF=CntvUM5hQ@mail.gmail.com>
date: Thu, 9 May 2019 20:29:45 +0200
message-id: <CADHp2UCQzrSz2q7E2m-w0fz9u8LHV7J_yGPbFUGFjWe8tZnEpQ@mail.gmail.com>
content-type: multipart/alternative; boundary="0000000000004938e1058878a6d2"

Falcons-Fan   (Lilburn, GA, United States) Added the following extra information on :2019-05-09 19:58:10
 Scammer Information
Scam Website:
Fax:

 Got more information on this Scam/Scammer? Add to Scam Report
 Problems with this Report? Let us know Report to Scamalot

Ad Blocker Detected
Our website is made possible by displaying online advertisements to our visitors.
Please consider supporting us by disabling your ad blocker.
Thanks!
Scamdex
PING