| |
|
|
| |
|
|
|
 |
|
| |
|
Western Union Payment Date: Sun, 13 Dec 2009
02:03:26 -0500 MIME-Version: 1.0
Content-Type: text/html;
Western
|
|
|
|
 |
|
 |
| |
|
Date Reported: 13th December 2009  |
Risk Level: MEDIUM-HIGH |
|
| |
 |
 |
| |
Email Subject: |
Western Union Payment Date: Sun, 13 Dec 2009 02:03:26 -0500 MIME-Version: 1.0 Content-Type: text/html; |
|
Apparent Sender: |
Western |
|
Return Address: |
Not found |
|
| Email Format: |
HTML |
| |
URL of Web Content: |
http://www.westernunion.com
|
|
Anchor text of URLs: |
1) From: "-censored by
MillerSmiles-"
Subject: -censored by
MillerSmiles- Payment
Date: Sun, 13 Dec 2009
02:03:26 -0500
MIME-Version:
1.0
Content-Type:
text/html;
charset="Windows-1251"
Content-Tr
ansfer-Encoding: 7bit
X-Priority:
3
X-MSMail-Priority: Normal
X-Mailer:
Microsoft Outlook Express
6.00.2600.0000
X-MimeOLE: Produced By
Microsoft MimeOLE
V6.00.2600.0000
X-Spam-Status: Message
recipients not local.
X-Scanned-By:
MIMEDefang 2.53 on 160.36.0.85
ATTENTION:
CUSTOMER
Please be informed that the
Federal Bureau of Investigation has completed
an
Investigation on the Lottery issue in
which you presently have with your present
transaction agents. Your transaction has
already been paid out to the Internal
Revenue Service of Nigeria whom have
presently placed an hold on your
transaction
due to failure to pay the Nigerian Government
tax clearance for your
funds.
According to
the Federal Bureau of Investigation, the real
amount of your money
is $800,000 US Dollars
and it has been dispatched to the Nigerian
-censored by MillerSmiles-
Head Office
Foreign Operations Manager "Mr. Anthony
Carmelo" whom is presently
in-charge of
your transaction. It has been designated that
the sum of $8,000 be
paid to you daily using
-censored by MillerSmiles- Money Transfer,
therefore your funds is
presently with
-censored by MillerSmiles- and has been
placed on hold.
Presently, the funds are in
the -censored by MillerSmiles- system and
once you have paid the
Nigerian Tax
Clearance in the amount of $100, your funds
will NOT be released.
You are required to
pay the sum of $100 to the Foreign Operations
Manager whom
shall deposit to the Nigerian
Tax system directly and once this has been
completed, the money will then be changed
into your name and released for
pay-out
immediately.
In order to prove that your
funds are in the -censored by MillerSmiles-
system, I would
require that you go to their
website via
"http://www.westernunion.com, 2) Check
Transfer, 3) Transfer Status |
|
Location: |
Location not available |
| |
Scam number: |
6432-86406-298570 |
| |
Comments: |
- Email asks you to confirm/update/verify your account data at Western by visiting the given link. You will be taken to a spoof website where your details will be captured for the phishers.
- Western never send their users emails requesting personal details in this way.
- The anchor text appears as a legitimate URL, but don't be fooled - clicking on it will take you to a phishing site!
|
| |
|
|
|
 |
| |
|
| |
charset="Windows-1251"
Content-Transfer-Encoding: 7bit X-Priority: 3
X-MSMail-Priority: Normal X-Mailer: Microsoft
Outlook Express 6.00.2600.0000 X-MimeOLE:
Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Message
recipients not local. X-Scanned-By:
MIMEDefang 2.53 on 160.36.0.85
ATTENTION: CUSTOMER
Please be informed that the Federal Bureau
of Investigation has completed an
Investigation on the Lottery issue in
which you presently have with your present
tra...
|
|
Click for full size image |
| |
| Website: |
|
|
| |
|
Click for full size image |
|
|
 |
 |
 |
|
| |
 See our most recent scam reports |
|
Browse our scam report archives |
|
Search |
Please send us any scam/phishing emails you have received by reporting them here
For access to our huge blacklist of domain names and to sign up to our live feed of ALL the scams we receive please take a look at our Honeytrap service
If you have received the email below, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content, such as a different subject or return address, or with the fake webpage(s) hosted on a different webserver.
We aim to report every variant of the scams we receive, so even if it appears that a scam you receive has already been reported, please submit it to us anyway.
|
| |
|
|
|
|
