Reporting suspicious mail to the Internet Fraud Advisory
 

We need both the body text and the complete mail headers in order to investigate fraud mail.   N.B. Please DO NOT send graphics as attachments unless by prior arrangement. The fraudsters will often send badly forged certificates and identity documents. These are not useful.

Please use a meaningful, short phrase in your "subject" line and make sure this relates to the body of your message. If you leave the "subject" line blank, or just write "Hi" your mail is likely to be deleted. Because of the spammers we have removed all "mailto" links within the site.   Please write to:

 john(at)data-wales.co.uk

It would be helpful to know how you found the Fraud Advisory pages. Did you search the Web for a name, for example?

MAIL HEADERS. You will not normally see full headers when you read your mail but these are important in investigating Internet fraud. If you are not familiar with mail headers you can search your mail service provider's Help system or consult one of the many Web pages on the subject.

There can be lots of variations but e-mail headers will tend to look like the block of text below and have around the same number of lines. Your mail software may have an option to "forward" an e-mail complete with full headers, or you may have to do a bit of cutting and pasting. However you achieve it, a good report of scam mail will look like the one below. Remember to include the body text of the mail. You can preface such reports with any comments or questions you may have.


X-Apparently-To: ****@****.com via 217.146.189.164; Wed, 26 Mar 2008 23:24:47 +0000
X-Originating-IP: [196.25.211.4]
Authentication-Results: mta839.mail.ukl.yahoo.com from=gmail.com; domainkeys=neutral (no sig)
Received: from 196.25.211.4 (EHLO telkomsa.net) (196.25.211.4)
by mta839.mail.ukl.yahoo.com with SMTP; Wed, 26 Mar 2008 23:24:47 +0000
Received: (qmail 13944 invoked from network); 26 Mar 2008 23:24:24 -0000
Received: from unknown (HELO User) (telkomsa110791@telkomsa.net@[82.128.20.186])
(envelope-sender <mrwalterc@gmail.com>)
by O (qmail-ldap-1.03) with SMTP
for <****@yahoo.com>; 26 Mar 2008 23:24:21 -0000
Reply-To: <mrwalterc@gmail.com>
From: "MR. WALTER CASPER"<mrwalterc@gmail.com>
Subject: YOUR OVER DUE LOTTERY/INHERITANCE FUNDS.
Date: Wed, 26 Mar 2008 15:24:44 -0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Content-Length: 1208
 

 

THE DESK;MR. WALTER CASPER,
DIRECTOR WORLDBANK DELEGATES IN WEST AFRICA.
14 IDOWU CRESENTS, LAGOS-NIGERIA.
OUR REF: WBD/WAN/BX/021/08

ATTN; BENEFICIARY

YOUR OVER DUE LOTTERY/INHERITANCE FUNDS.

THIS IS TO NOTIFY YOU THAT YOUR OVER DUE INHERITANCE FUNDS HAS BEEN
GAZETTE TO BE RELEASED, VIA KEY TELEX TRANSFER (KTT) -DIRECT WIRE
TRANSFER TO YOU OR THROUGH ANY OF OUR CORRESPONDENT BANK NOMINATED BY THE SENATE COMMITTEE FOR FOREIGN OVER DUE FUND TRANSFER. MEANWHILE, A
WOMAN CAME TO MY OFFICE FEW DAYS AGO WITH A LETTER, CLAIMING TO BE YOUR TRUE REPRESENTATIVE.

HERE ARE HER INFORMATION FOR YOU TO CONFIRM TO THIS OFFICE IF THIS
WOMAN IS TRULY FROM YOU OR NOT SO THAT THE FEDERAL GOVERNMENT WILL NOT BE HELD RESPONSIBLE FOR PAYING INTO THE WRONG ACCOUNT.

NAME:NAME JANET WHITE BANK NAME: CITI BANK
BANK ADDRESS: ARIZONA, USA.
ACCOUNT NUMBER: 6503809428.

PLEASE, DO RECONFIRM TO THIS OFFICE, AS A MATTER OF URGENCY IF THIS
WOMAN IS FROM YOU. YOU ARE REQUESTED TO FILL AND SEND THIS INFORMATION FOR VERIFICATIONS PURPOSES SO THAT YOUR FUND VALID US$4.5M US DOLLARS WILL BE REMITTED INTO YOUR NOMINATED BANK ACCOUNT.THIS FUND IS AS A RESULT OF INHERITANCE ON YOUR BEHALF.

INFORMATION NEEDED FROM YOU FOR VERIFICATION IS AS FOLLOW:
1. YOUR NAME: 2. YOUR FULL ADDRESS:
3. YOUR TELEPHONE/ FAX :
4. AGE: 5. SEX:. 6. YOUR OCCUPATION:..
7. YOUR BANKING DETAILS:..

AS SOON AS WE RECEIVE THIS, WE WILL COMMENCE WITH ALL NECESSARY
PROCEDURES IN OTHER TO REMIT THIS MONEY INTO YOUR ACCOUNT. THE WORLD BANK DELEGATES REPRESENTATIVE IN WEST AFRICA AND THE SENATE COMMITTEE FOR FOREIGN OVER DUE INHERITANCE FUND HAVE APPROVED AND ACCREDITED THIS REPUTABLE BANK WITH THE OFFICE OF THE DIRECTOR, INTERNATIONAL
REMITTANCE/FOREIGN OPERATIONS,TO HANDLEAND TRANSFER ALL FOREIGN INHERITANCE FUNDS THIS FIRST QUARTER PAYMENT OF THE YEAR 2008. HOWEVER, WE SHALL PROCEED TO ISSUE ALL PAYMENTS DETAILS TO THE SAID MRS.WHITE, IF WE DO NOT HEAR FROM YOU WITHIN THE NEXT
SEVEN WORKING DAYS FROM TODAY.

WE ARE SORRY FOR ANY INCONVENIENCE THE DELAY IN TRANSFERRING OF THIS
FUND MUST HAVE CAUSE YOU REPLY ME TO: dworldbanks@yahoo.co.uk
mrwalterc@gmail.com )

BEST REGARDS,
MR. WALTER CASPER,

DIRECTOR WORLDBANK DELEGATES IN WEST AFRICA.
 

 



  Internet Fraud Advisory