Life Changing Offer! 2

Posted by JD 07/03/2015 at 10:00

Just got this email and I’m excited! Might be able to completely change my life! Er … perhaps not. The first line is a little, er, familiar for a bank.

Hello dear,

Ref: Deposit Number: 94644n99 Custodial Safekeeping Receipt: GBS 38 633 083 7IE.

This mail being sent to you for the umpteenth time is about the payment/transfer mandate instruction we received from the Central bank to process and release the total sum of US$2.875, 000.00 (TWO MILLION, EIGHT HUNDRED AND SEVENTY FIVE THOUSAND UNITED STATE DOLLARS) ONLY in your favour as the end recipient.

In line with the transaction process and considering the intense and frustrating nature of contract/inheritance payment policies after the 9/11 terrorist attack in USA, and having tried to pay you by bank to bank wire transfer and it failed,
Following the meeting held today, my office have being directed to guide you on the two best international way to move large funds from one country to the other without questioning. To help you, we have suggest to you the two best international method of payment below to receive your fund without any hitch.

1. PAYMENT BY ATM CARD PAYMENT METHOD:
The above implies that we are going to issue you an ATM Card with your full total amount US$2.875, 000.00 loaded in it and dispatch to your home address by DHL CURRIER SERVICE OR FEDEX within 72 bank working hrs to enable you make withdrawals from your ATM Card without questioning.

This payment system does not waste time. It is quicker, faster and easier. But it is important we let you know the maximum withdrawal value of the ATM Card that we are going to issue you is $5,000.00/Ј5,000.00 only permitted on withdrawal per day and as our bank is duly inter-switched with banks all over the world, you can make withdrawals at any CARD CASH CENTRE of your choice in the world 24hrs, 7 days of the week without hitch.

NOTE: that you the beneficiary will bear the cost of your ATM Card shipment to your country home address because there is no way the shipping cost can be deducted from the fund as this is in line with the binder provision.

2. BY OFFSHORE PAYMENT SYSTEM:
This means that you shall travel to one of our offshore banks in Europe near you to receive your money without any more fuss.
NOTE that you are not required to travel with any fees or any clearance documents. You only need to travel with a copy of this letter mail and your account details where you would want the fund transferred into.

Having lectured you know brief on the above 2 options, there is no much time to waste as we want to conclude on this payment matter without more delay. Therefore, treat with utmost urgency and get back to us immediately with your preferred receiving choice to enable us move into action.

We wait your quick confirmation, and rest assured of our professional service.

Regards,
Mr. Dave Bernards,
Director, Credit/Remittance Dept
Director, Credit/Remittance Dept,
United Bank For Africa – CI, Abidjan Cote d’Ivoire
Tel: +225-5454-9020.

Besides the broken English, strange comma/period locations in USD amounts, “Mr. Dave” and that they’ve contacted me umpteenth times – perhaps this isn’t the truth?

The From/To addresses were almost the same and none of the addresses were sent directly to me.

  • swift.msg.mt.atm.103@accountant.com and
  • swift.msg.mtt.atm.103@accountant.com
    Looking at the full email headers, the email came from 177.107.78.106 … host.americantowman.net. A DNS lookup by name goes to 64.64.9.29 which resolves to a USA location. The 177.107.78.106 resolves to Brazil and the email claims to be from Africa … perhaps 177.107.78.106 has NOT been hacked – rather it is pretending to be a server that it clearly is not. That seems fishy.

Perhaps my life isn’t changing? Could it be – this isn’t all true? I just wish one of their “offshore banks near me in Europe” was actually near me.

Oh well, it was clearly a scam. 3 min to see it and I’m positive. I can’t even tell an admin their website has been hacked, since the owner of the subnet in Brazil doesn’t appear to be legit and only has a /26 network.

Plus, when was the last time you got an email from a bank that didn’t just say to login into your account to see a message?

Did a little more work … and discovered a few things. Seems they host an ActiveX download. Don’t think I’ll be doing that.

Got another offer!!!!

THE EURO MILLION LOTTERY PROMOTION
INTERNATIONAL PROMOTIONS/PRIZE AWARD DEPT.
Leganitos 47-Pza. De
Espaсa, 28013 Madrid.
REF. Nє: JPK/2551257643/2015
BATCH NUMBER: ETT/1362/CNZ 04/9/2015
Ticket No:286-11735768-106)

FINAL AWARD WINNING NOTIFICATION

ATTENTION: STAKE WINNER,

We are pleased to inform you of the release of the results of the Euro Million Lottery Promotion under the INTґL PROMOTION PROGRAM (IPP) held on 28th AUGUST, 2015, your e-mail address attached to the Ticket No: 286-11735768-106 with serial number 21225-1 drew the lucky numbers 11-29- 30- 31-34- 4 + 7, which consequently won the lottery in the 3rd category,

You are hereby approved for a lump sum payout of Ђ915,810.00(NINE HUNDRED AND FIFTEEN THOUSAND EIGTH HUNDRED AND TEN EUROS ONLY)in cash credited to file REF. Nє:T/2481257643/2015; this from a total cash prize of 10,989,720.00 EURO shared among the twelve international winners in this category Please you must quote your Ref No to your claim Agent in all communication to avoid double claim.

To begin your claim, Please contact your claims agent The Foreign Operations Manager, Diamond Trust Seguros S.A MARTIN PEREZ Tel:+34 603 312 879 Fax: +34 911 820 152 Email:lotto.consultant@consultant.com

Remember all prize money must be claimed not later than 28th SEPTEMBER,2015 Any claim, not made before this date will be returned to the MINISTERIO DE ECONOMIA Y HACIENDA as unclaimed fund.

Also be informed that 5% of your Winning belongs to (Diamond Trust Seguro. S.A.) Because they are the promotion company that played the lottery with your e-mail, this Five percent will be paid only after you have received your awarded prize (money) in your designated bank account of your choice.

Three (3) certificates are to be issued to you by the local government tax authority, ministry of finance and ministry of interior, to back up your winning. Your agent will direct you further on the administrative requirement to enable the bank to release your fund to you.

Jonathan Sanchez
(DIRECTORIO DE CONTENIDOS)

FILL THE FORM ATTACHES IT WITH A COPY OF YOUR IDENTIFICATION & FAX OR Email IT BACK FOR PAYMENT APPROVAL.+34 911 820 152 TRANSFER OPTION: BANK TRANSFER ________________________

CERTIFY CHEQUE ____________________________________________

FIRST NAME: _______________________________________________

LAST NAME: ________________________________________________

(HOME) ADDRESS: _____________________________________________

DATE OF BIRTH_______________________________________________

OCCUPATION________________________________________________

EMAIL ADDRESS______________________________________________

BATCH #0____________________________________________________

PHONE#O_____________________________________________________

FAX__________________________________________________________


This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

I must be the luckiest person alive!

  1. INTPJavaGirl 07/06/2015 at 04:39

    You will notice they didn’t say USD. They said “UNITED STATE DOLLARS” and listed it as US.
    I’ve not heard of a United State before. I bet it has a very low exchange rate to USD. Perhaps Two Hundred Eighty Seven Trillion 500 Million to 1? Making the offer worth $0.00 when rounded to the nearest cent…

  2. JD 09/07/2015 at 21:02

    About the 2nd Winning offer -

    Almost forgot – need to share the email addresses far and wide!

    Why isn’t Jonathan Sanchez sending the email?
    Why are the FROM and REPLY-TO different?
    Why would Euro-Loto use yahoo or consultant.com as email addresses?

    Real organizations have their own email server(s) and use the same FROM/REPLY.

    Looked over the email headers for a few seconds. Multiple, unrelated, subnets were used. Clearly someone found a few hacked servers to abuse for email. Incompetent admins need to be fired.