Scam Tip Report #97003 - Award Winner Beneficiary!
| Scam Reporter | Scam Tips Received
|
|---|
| Falcons-Fan
Lilburn, GA, United States
2019-09-12 16:51:58
Nigerian/419 Scam
|  +1 Award Winner Beneficiary! This is an advanced fee scam ... I also included the full headers. Law enforcement can get them by contacting Scamalot. Please read about the scam below...
Dear E-mail Account User,
Congratulations, your email id has just won you USD$720,000.00 (Seven Hundred and Twenty Thousand United State Dollars Only). REFERENCE NO: MSW-L/2019-251050/09. To claim the payment, Contact Claim department Agent Name: Mr. Patrick Wilson.
E-mail: fiduciaryclaimdepartment4@hotmail.com
Email: fiduciaryclaimdepartment02@outlook.com
Tel: +27 (0) 63 598 4897
Thanks you.
Online award Coordinator.
PLEASE READ THE USEFUL INFORMATION BELOW ...
Use BOTH Bing and Google to search email addresses and phone numbers so you will not get ripped off.
Never use Money Gram, Western Union, Ria to send a fee to strangers. Never buy an i-tunes card, Amazon card steam wallet giftcard(s) or any gift cards to send to scammers.Never use bitcoin and send the wallet / address to scammers. If you do, it is gone for ever. If you must send the money (please do not) When you use money gram, Western Union, the United States is the control of the United States, and even if it is in Africa and you need to transfer to New York. Send the money to a US, UK, Canada, or South Africa bank account only. You could get your money back from below
If you send money to this scammer, please
In the US ...
1.first ... file a police report
2. second ... file a complaint at www.ic3.gov and include the police report case number near the bottom of the form.
In the UK ...
1.first ... a police report
2. second ... file a complaint at www.actionfraud.police.uk and include the case number of the police report |
Follow Ups/Extra Information. Most recent is listed first.
| Falcons-Fan (Lilburn, GA, United States) Added the following extra information on :2019-09-12 21:16:24 |
|
ATTN: Co-Winner .
We wish to acknowledge receipt of your message to this office in respect to your Lottery winning notification and claim Congratulations.
It is our obligation to inform you that we have been mandated to process, release and transfer your winning fund by Sweepstakes Lottery Award promotions. We are mandated to supervise, assist and monitor the claim and payment of winners of the Lottery from the designated bank here in South Africa.
For us to verify and commence the official processing of your winning fund, we need you to fill the winner's verification form below and email them to us:
The details we require include:
1. Name in Full:
2. Address:
3. Nationality:
4. Age:
5 Sex.
6. Occupation:
7. Marital Status:
8. Phone.
9. Fax:
It is very important that you send these details to us urgently so that we can start processing your payment before the closing date. As soon as we receive your winning / personal details, we shall revert back to you with our payment options available.
We can only process your fund after we confirmed your details and as soon as we receive above details, we shall relate to you any information that will lead positively to the successful transfer of your fund.
Once again, we send our congratulations to you on your winning. Please, kindly reply our emails on time so that we can meet up the payment deadline.
Thanks you.
Truly yours,
Mr. Patrick Wilson.
+27 63 598 4897 (direct line
Scam EmailReceived: from HE1EUR01HT228.eop-EUR01.prod.protection.outlook.com
(2603:10b6:5:120::37) by DM6PR13MB3385.namprd13.prod.outlook.com with HTTPS
via DM6PR06CA0024.NAMPRD06.PROD.OUTLOOK.COM; Thu, 12 Sep 2019 20:32:48 +0000
ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
b=X6hJdNnWC2xDm6WM/pPkPqcVJm5O3ZJ1UKUvEEzNSm2HsogpaHNSkybjK/f+yHsJ5f/H2iD6e/eqZ4VJ+JCKEGiLwCg/bHxUBtjpeMbX07OoXlEioxQMjFhl9kSD+8CDxSG3LMMD3EI8RKizGtKRSoLcbNBvCywlkYk8w8n8aWvxJPkAgDgwQldfd5NbVscOx0Whk3LQgunjmiMA8wt1cBB5ojUPV+Gn1kaqgEzrMWdD1rSE93lEXt5XzSPITPWzYhXUtBtHo+oiwyHjPZxKgdXaEtCI71UNdE7Q9MXmmgrGLo/ewBxaU8yebDkz95cZNlviODrW5TevjNojftsv+Q==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=dOW82QQzE+vD+u/CydeptQzjgs1UWpqyFj3kDkb/HzE=;
b=dqfkCd9GoUqkPu2u3b1NDzVLjT5Lq5yxGEhEvLc9fAylRgUPWTYrGXU7Avi4E7pK0BGXvny3MAiXSPrYUVgmgczx8Fc7ew3c93BQtkbpfSmYoJt/Fp+bEey21P+1ONom7NTgonm/ejN4VOF6D9/6a76FOI+WQcFcryp+n27KqQ1XGRu0zMJt4ZrF+XYaNNrBK35eNEQkARQ2ir1BUgZ1gg9Qu0yjuIHWMwv9P//6jKXzaal/0hyDrsSIwR+eLuZFWF2ti3+33XPpzTpkV2qn3LuORqLRWY9ei0/p8U+Lx6KuTTQilDZOunO/1Tzn5XTcY7+HVx5Zwxq/JGChAnSw/w==
ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is
40.92.65.22) smtp.rcpttodomain=outlook.com smtp.mailfrom=outlook.com;
dmarc=pass (p=none sp=quarantine pct=100) action=none
header.from=outlook.com; dkim=pass (signature was verified)
header.d=outlook.com; arc=pass (0 oda=0 ltdi=1)
Received: from HE1EUR01FT018.eop-EUR01.prod.protection.outlook.com
(10.152.0.55) by HE1EUR01HT228.eop-EUR01.prod.protection.outlook.com
(10.152.1.208) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2263.14; Thu, 12 Sep
2019 20:32:47 +0000
Authentication-Results: spf=pass (sender IP is 40.92.65.22)
smtp.mailfrom=outlook.com; outlook.com; dkim=pass (signature was verified)
header.d=outlook.com;outlook.com; dmarc=pass action=none
header.from=outlook.com;
Received-SPF: Pass (protection.outlook.com: domain of outlook.com designates
40.92.65.22 as permitted sender) receiver=protection.outlook.com;
client-ip=40.92.65.22; helo=EUR01-HE1-obe.outbound.protection.outlook.com;
Received: from EUR01-HE1-obe.outbound.protection.outlook.com (40.92.65.22) by
HE1EUR01FT018.mail.protection.outlook.com (10.152.0.175) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id
15.20.2263.14 via Frontend Transport; Thu, 12 Sep 2019 20:32:46 +0000
X-IncomingTopHeaderMarker:
OriginalChecksum:15F3D46E873197FD3E84DDB1B5351B36119CE9A8E662EA850103B878934387F4;UpperCasedChecksum:4CE1B5A1A9306AF428A07B25A7DAF6A7208083C7AE05CEE52602A7FB02FD8A8C;SizeAsReceived:5427;Count:40
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=AnVlvQwXuy8hsA3mqModo8RiK0H4hrKO79L0KNWAh/NIRpo5czOhaLQBAaLf42Cz/oFCS2ksYww7zElNCvOpbk4MhgX5SZ2MFFi+9O2w5uNiunT+70heuixqXn/pDOGhpMQt2M79L7XRAf+8K0VtdYKdTb7KH/tOfphQvrJWTUPlcyNBg6LHbgzYPPjLco1dXXMRu+RSarLw92AfjjXwUASr14olt1SKg/d8yrRGEl50zbGcumdP9T4qyr9ufdGzpcQAYWooo8ac6GdSitv69PWJGz0zZHQxaBWroXmKySbCRtLirXAmZW4af/+PGYne15QENAX1PPuI3cDUJKIX7Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=dOW82QQzE+vD+u/CydeptQzjgs1UWpqyFj3kDkb/HzE=;
b=NmDY7ajQRM1BWGRNu3RQ6yF7Kk9AzfWgNbbv9fMNcFYjNXS2syfoU6kVD5Yl/5XqH5LBAyVIGpAAb1bgFVL7J5by5l5XGEX3nRxMHa3P+CeXYd9SJHX8J3us6joLugqAXzfIwE+CAvSBQzDcPOvQBjA0aFdkOE+Pme1GWq+C11l84E68Ge2cEoSr8Uwsd+2zK4BAixMTqeo4YlOCQOeMP6cO4yH8uJQojBSw36+qqPZbkRe1eluBk7NLBzH+8WeHxnzskHfSr/8W2/hCf6FTtp4TQp8ZaUT5gEh+41S/Wxun0sV5tk+LNffQh0yH8DxrHoAbc9nKtGeAaDUDQYLMbA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=dOW82QQzE+vD+u/CydeptQzjgs1UWpqyFj3kDkb/HzE=;
b=CM3r1hE0/0qBWBwZZKHSWm+uxHSQv5nsP2sIb+ZsZ/NVtrR6/77UKCrxGcwpfXRiun4v7DoDSn+fcmXate/KIGQvPm5QyRrlopNYDUa0gyBBMvFS7octZB563chiJwESG+0ZfIJvMZxNyLgYyiTH6uxsn9mp/3RAonfmf2qS6dZ+OT5LyF5fUxlGB/ibgS/0a+FyvTIZNrBKK3E//ukO8HTFrch6j1O2nTHYchvM2OWFcQxAtmX3LG6N58ZNthZ8WRyMM3XzdOMgPB1jIz3LqwAFxZIMLk9w1DfVukja+IY73TZY4FR8q0yzb2LvPIMPXtjBkCC5q5yudjaxhKm0lg==
Received: from VE1EUR01FT031.eop-EUR01.prod.protection.outlook.com
(10.152.2.60) by VE1EUR01HT158.eop-EUR01.prod.protection.outlook.com
(10.152.2.254) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2263.14; Thu, 12 Sep
2019 20:32:46 +0000
Received: from VI1P192MB0192.EURP192.PROD.OUTLOOK.COM (10.152.2.59) by
VE1EUR01FT031.mail.protection.outlook.com (10.152.2.225) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id
15.20.2263.14 via Frontend Transport; Thu, 12 Sep 2019 20:32:46 +0000
Received: from VI1P192MB0192.EURP192.PROD.OUTLOOK.COM
([fe80::d87b:61e6:5840:1946]) by VI1P192MB0192.EURP192.PROD.OUTLOOK.COM
([fe80::d87b:61e6:5840:1946%9]) with mapi id 15.20.2241.022; Thu, 12 Sep 2019
20:32:46 +0000
From: Claim Department
To: <>
Subject: ATTN: Co-Winner .
Thread-Topic: ATTN: Co-Winner .
Thread-Index: AQHVaak8rnM+OqnPR0Sm6vq0nqVngw==
Date: Thu, 12 Sep 2019 20:32:46 +0000
Message-ID:
References:
In-Reply-To:
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-incomingtopheadermarker:
OriginalChecksum:3D4ACC2FA752F41F9445AD38D0D90632143661B8AABAD40C4A2C0FC617B013D9;UpperCasedChecksum:3259DC108AB5F08298B99200741ABEFE2D5E14278C416004530D2B093A14700B;SizeAsReceived:6686;Count:42
x-tmn: [bQuxrm9l203zZf69aa/AEGaq65DNXQ3q]
x-ms-publictraffictype: Email
x-incomingheadercount: 42
x-eopattributedmessage: 1
x-ms-exchange-slblob-mailprops:
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
X-Microsoft-Antispam-Untrusted:
BCL:0;PCL:0;RULEID:(2390118)(5050001)(7020095)(20181119110)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(201702181274)(2017031322404)(2017031323274)(2017031324274)(1601125500)(1603101475)(1701031045);SRVR:VE1EUR01HT158;
X-MS-TrafficTypeDiagnostic: VE1EUR01HT158:|HE1EUR01HT228:
X-Microsoft-Antispam-Message-Info-Original:
u/+RiA6ltaU5WtKkdh5bp8kwBdvnLMLRyoKhM4nvoSbONlRnQmJhivBKsXazwt5nSJzhjEj9OQ4vU4CgymH1QUedHm+fjJRzKwQtkt1QXcA7ksWrcMWT+XjRy3VkAbouuUUjmxRBm7UXhFWZsJgujnHBn7LGHvZxIbTfwKqnvHffIVb4YBYHtAcnb3e8lLrf
x-ms-exchange-transport-forked: True
Content-Type: multipart/alternative;
boundary="_000_VI1P192MB019211ED6677DD453C5A5FA4CEB00VI1P192MB0192EURP_"
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR01HT158
X-IncomingHeaderCount: 40
Return-Path: fiduciaryclaimdepartment02@outlook.com
X-MS-Exchange-Organization-ExpirationStartTime: 12 Sep 2019 20:32:47.0650
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
1956fbdc-d78b-4ca6-2f02-08d737c05f70
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-Exchange-Transport-CrossTenantHeadersStripped:
HE1EUR01FT018.eop-EUR01.prod.protection.outlook.com
X-MS-Exchange-Transport-CrossTenantHeadersPromoted:
HE1EUR01FT018.eop-EUR01.prod.protection.outlook.com
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource:
HE1EUR01FT018.eop-EUR01.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-UserLastLogonTime: 9/12/2019 8:32:09 PM
X-MS-Office365-Filtering-Correlation-Id: 1956fbdc-d78b-4ca6-2f02-08d737c05f70
X-Microsoft-Antispam:
BCL:0;PCL:0;RULEID:(2390118)(5000188)(711020)(4605104)(610169)(650170)(651021)(1124261)(8291501072);SRVR:HE1EUR01HT228;
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 40.92.65.22
X-SID-PRA: FIDUCIARYCLAIMDEPARTMENT02@OUTLOOK.COM
X-SID-Result: PASS
X-MS-Exchange-Organization-PCL: 2
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Sep 2019 20:32:46.9990
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 1956fbdc-d78b-4ca6-2f02-08d737c05f70
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1EUR01HT228
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.2849190
X-MS-Exchange-Processed-By-BccFoldering: 15.20.2263.000
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;dwl:0;dkl:0;rwl:0;ucf:0;jmr:0;ex:0;auth:1;dest:I;OFR:SpamFilterPass;ENG:(5062000261)(5061607266)(5061608174)(1005109)(4900115)(4920090)(6225004)(4950130)(4990090)(9110004);
X-Message-Info:
5vMbyqxGkdehkWX42Bavm90nLCFWNwL0djoeJodALDwHR+FwVoy+y3NsJ8NB7XfdtDt5CkS8o9ZCAeU8wUHcg59mQKeXpd53ltDJL4OGh2fOcRLUp0bNfy9l8OorJmkunrBeJlXKiUtUpBM53cFtTAm3nq4fXurzuLQ5/RwEw5DB065sMv56RTr1FhV0mHBMNz/sgPR5WlTU2/O2wHSn2g==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtHRD0xO1NDTD0tMQ==
X-Microsoft-Antispam-Message-Info:
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
MIME-Version: 1.0
--_000_VI1P192MB019211ED6677DD453C5A5FA4CEB00VI1P192MB0192EURP_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
