|
419 Scam Example: "SWISS PROMO LOTTERY / Overseas Asset Management Ltd (Paul Hunt, Henry Lewis)"
"SWISS PROMO LOTTERY / Overseas Asset Management Ltd (Paul Hunt, Henry Lewis)" is a label used by criminals for an advance fee scam that involves fake checks and money orders produced in Canada. Victims are contacted by bulk email and told they won a lottery prize. They are told to contact a company called "Overseas Asset Management Ltd", which handles the payout. Several victims in the US were mailed fake money orders for US$6000, supposedly a loan, which they are told to cash and then wire the money to the "lottery claims agent". In effect the victims will wire $6000 of their own money to the criminals, because the money orders will bounce. Other victims were instructed to wire £985 to a person in London who used the alias "Anthony Wilkinson". If you receive money orders or checks "loaned" to you to pay lottery claims fees (which no legitimate lottery charges in the first place), do not open the letter but take it directly to the police so they can check the content for fingerprints. If you live in the United States, contact the nearest field office of the United States Secret Service (USSS). If you live in Canada, contact the RCMP. Please forward us any emails by the criminals that you have received.
ATTN: FIRSTNAME LASTNAME. RE: DELIVERY AND CLAIMS OF LOTTERY JACKPOT. WE HAVE RECEIVED YOUR APPLICATION FOR CLAIMS OF YOUR LOTTERY BENEFITS WHICH AMOUNTS TO €1,500,000.00 EUROS (ONE MILLION, FIVE HUNDRED THOUSAND EUROS ONLY). WE HAVE ALSO VERIFIED THE WINNING NUMBER AND TICKET NUMBER. REF NUMBER: SLI/421/960/05 BATCH NUMBER: ST-688-SN13-05 TICKET NUMBER: 27522465896-532 PLEASE NOTE THAT THIS OFFICE IS PRESENTLY IN CHARGE OF YOUR PAYMENT VERIFICATIONS AND WILL TAKE ALL NECCESSARY STEPS TO ENSURE THAT YOU RECIEVE YOUR WINNINGS AS AT WHEN DUE. IN THIS LIGHT, YOU ARE IMMEDIATELY REQUIRED TO SUPPLY THE DETAIL AND FILL OUT THE ATTACHED FORM. THIS IS TO ENSURE FOR PROPER IDENTIFICATION BEFORE PAYMENTS. WE CURRENTLY CHARGE A PROCESSING FEE OF £985.00 (NINE HUNDRED AND EIGHTY FIVE POUNDS) ONLY. THIS WILL COVER THE ENTIRE COST OF YOUR APPLICATION FORM PROCESSING AND DELIVERY BY OUR OUT STATION LAWYERS. THIS AMOUNT IS TO BE PAID BY YOU IMMEDIATELY, THROUGH WESTERN UNION MONEY TRANSFERS TO ONE OF OUR ON DUTY LAWYERS: NAME: MR. ANTHONY WILKINSON ADDRESS: 15 MILMARK GROVE, THAMESMEAD LONDON.SE28 8EY. PLEASE NOTE THAT THE ABOVE AMOUNT CANNOT BE DEDUCTED FROM YOUR LOTTERY WINNINGS BECAUSE YOUR CLAIMS HAVE NOT BEEN FULLY PROCESSED. FOR FURTHER INFORMATION, PLEASE CONTACT THE UNDERSIGNED. THANK YOU. YOURS FAITHFULLY, DR. HENRY LEWIS (DIRECTOR OF OPERATIONS) Note that postal addresses on Western Union transfers have no meaning, except for the city. The scanned signature didn't actually look like "Henry Lewis" at all. It seemed to read "Rasalaheya" or something like that. Here's another email:
Dear Firstname Lastname, We confirm the receipt of your payment details from the Swiss Promo Lottery Company. In line with our prepayment processes and procedures, we are required to ensure adequate sponsorship of all aspects of your payment and delivery to you. The processing of your payment will attract total fees of between US$5,000 to US$15,000.00 depending on your location within the USA. Hence, our sponsors in the USA and Canada will make provision for this amount first to you. We will therefore be recommending you and sending your details to our sponsor agents first. Principally, the reason for this recommendation is to ensure that your winnings are adequately processed and all expenses paid by our private sponsors in USA or Canada. The sponsorship amounts vary between $5,000.00 to $50,000.00 and this amount will be given to you first hand to ensure that it covers all expenses for you. If you wish us to confirm your recommendation for this sponsorship, please indicate by completing your full names and address, which your check can be drawn and posted securely. This is very important, as payments will be sent to you in Check, Drafts or Money Orders as the case may be. As soon as we receive the above details, we will submit same to allow our sponsors reach you. Please find attached your lottery payment application for completion. Thank you. Yours faithfully Dr. Henry Lewis. ________________________________________________________________ Sent via the WebMail system at overseasassetmanagement.com Form.doc (Title: OVERSEAS ASSET MANAGEMENT LTD, author and company are blank):
Here is another mail from the criminals (see 2nd mail for source):
The scammers mailed six counterfeit money orders in the amount of US$1000 each supposedly from a source in New York but actually mailed from Canada. If you receive money orders or checks "loaned" to you to pay lottery claims fees (which no legitimate lottery charges in the first place), do not open the letter but take it directly to the police so they can check the content for fingerprints. If you live in the United States, contact the nearest field office of the United States Secret Service (USSS). If you live in Canada, contact the RCMP. Another email from the criminals:
Message headers: Received: from [193.219.226.15] by web31302.mail.mud.yahoo.com via HTTP; Fri, 18 Mar 2005 10:29:37 EST Date: Fri, 18 Mar 2005 10:29:37 -0500 (EST) From: PaulHunt LoanINC <paulhuntloaninc@yahoo.ca> Subject: CONFIRM THE RECEIPT
WHOIS details for sending network (IP 193.219.226.15):
inetnum: 193.219.226.0 - 193.219.227.255
netname: ITCLICK-NETWORX-NG
descr: ITClick Networx Limited
descr: ISP
descr: Lagos, Nigeria
country: NG
admin-c: SAI22-RIPE
tech-c: SAI22-RIPE
status: ASSIGNED PA
remarks: ---------------
remarks: T-IP-20040304-I
remarks: ---------------
notify: hostmaster@itclick.net
mnt-by: TAIDE-NOC
changed: registry@taide.net 20040304
source: RIPE
route: 193.219.192.0/18
descr: TAIDE-NET
origin: AS5377
mnt-by: TAIDE-NOC
changed: registry@taide.net 20010402
source: RIPE
person: Sunday A Idajili
address: Suites B180/181 Ikota Shopping Complex
address: Victoria Garden City, Lekki
address: Lagos, Nigeria
phone: +234 1 4722950
phone: +234 1 4616821
fax-no: +234 1 4616126
e-mail: hostmaster@itclick.net
nic-hdl: SAI22-RIPE
notify: hostmaster@itclick.net
changed: registry@taide.net 20040304
source: RIPE
Another email from the criminals: ATTN: FIRSTNAME LASTNAME WE ARE IN RECIEPT OF YOUR DETAILED INFORMATION AS WELL AS CONTACTS. PLEASE NOTE THAT WE ARE DOING ALL WE CAN PRESENTLY TO SORT OUT PAYMENTS TO YOU WITHIN THE SHORTEST POSSIBLE TIME. WE HAVE SUBMITTED YOUR DETAILS TO OUR ACCREDITED CLEARING HOUSE BASED IN THE UK, OVERSEAS ASSET MANAGEMENT LTD. THIS COMPANY DOES ALL VERIFICATIONS, CONFIRMATIONS AND FINAL APPROVALS ON OUR BEHALF BEFORE WE CAN PROCEED TO DISBURSE ANY PAYMENTS THROUGH OUR BANKERS. BE REST ASSURED THAT WITH YOUR FULL COOPERATION WITH THIS PROCESSING/CLEARING HOUSE IN UK, YOUR WINNING WILL BE SCHEDULED FOR IMMEDIATE RELEASE TO YOU. YOU ARE THERFORE REQIURED TO PROVIDE FULLY ANY INFORMATION AS REQUIRED BY THIS OFFICE IN THE UK. FEEL FREE TO MAKE IMMEDIATE CONTACTS WITH THE OVERSEAS ASSET MANAGEMENT LTD ON, OVERSEAS ASSET MANAGEMENT LTD CALTHORPE ROAD EDGBASTON BIRMINGHAM B17 3TS, UNITED KINGDOM TEL: + 44 782 183 0842 TEL/FAX: +44 870 762 0889 info@overseasassetmanagement.com CONTACT DR. HENRY LEWIS NOTE: WE SHALL HONOUR ONLY SUCCESFULLY CLEARED WINNERS FROM THE OVERSEAS ASSET MANAGEMENT LTD OFFICE. THIS IS DUE BECAUSE, ONLY THIS OFFICE CAN CLEARIFY FULLY YOUR IDENTITY ON OUR BEHALF. THANK YOU. YOURS FAITHFULLY, MR. JIM WALKER (LOTTERY CO-ORDINATOR) __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register Netscape. Just the Net You Need. New! Netscape Toolbar for Internet Explorer Search from anywhere on the Web and block those annoying pop-ups. Download now at http://channels.netscape.com/ns/search/install.jsp Message headers: Date: Thu, 24 Feb 2005 10:26:23 -0500 From: swisscoord@netscape.net To: emailaddress (Firstname Lastname) Subject: CONFIRMED MIME-Version: 1.0 X-Mailer: Atlas Mailer 2.0 X-AOL-IP: 81.136.5.4
WHOIS details for sending network (IP 81.136.5.4):
inetnum: 81.136.0.0 - 81.136.23.255
remarks: *******************************************************
remarks: * Please send abuse reports to abuse@btopenworld.com *
remarks: *******************************************************
netname: BT-ADSL
descr: IP Pools
country: GB
admin-c: BTOW1-RIPE
tech-c: BTOW1-RIPE
status: ASSIGNED PA
mnt-by: BTNET-MNT
mnt-lower: BTNET-MNT
mnt-routes: BTNET-MNT
changed: preston.dialip@bt.com 20031114
source: RIPE
route: 81.128.0.0/11
descr: BT Public Internet Service
origin: AS2856
mnt-by: BTNET-MNT
changed: support@bt.net 20030615
source: RIPE
role: BT OPENWORLD OPERATIONAL SUPPORT
remarks: ********************************************************
remarks: * Please send abuse reports to abuse@btopenworld.com *
remarks: * *
remarks: ********************************************************
address: BT
address: Openworld
address: UK
e-mail: ims.adastral@btopenworld.com
admin-c: IT337-RIPE
tech-c: RJG3-RIPE
nic-hdl: BTOW1-RIPE
mnt-by: BTNET-MNT
changed: preston.dialip@bt.com 20030520
source: RIPE
WHOIS details for domains "overseasassetmanagement.com": Request: overseasassetmanagement.com connected to whois.domainpeople.com [204.174.223.70:43] ... Registrant: Sanusi Sunkanmi 115 Robins Ct Hackettstown, NJ 07840 United States of America Registrar: DomainPeople Inc. Domain Name: overseasassetmanagement.com Created on .............Fri Jun 06 02:55:25 2003 Expires on .............Mon Jun 06 05:55:33 2005 Record last updated on .Tue Aug 10 09:02:14 2004 Status .................HOLD Administrative Contact: Trem Int Limted Ron Ellis Byfangerstr.32 Essen, NRW 45257, DE (49)201 4868425 (49)201 4868425 prof_ryanzz@yahoo.co.uk Technical Contact: Trem Int Limted Ron Ellis Byfangerstr.32 Essen, NRW 45257, DE (49)201 4868425 (49)201 4868425 prof_ryanzz@yahoo.co.uk Billing Contact: Trem Int Limted Ron Ellis Byfangerstr.32 Essen, NRW 45257, DE (49)201 4868425 (49)201 4868425 prof_ryanzz@yahoo.co.uk Domain servers in listed order: ns1.vhostdns2.com 12.168.33.98 ns2.vhostdns2.com 12.168.33.99 (overseasassetmanagement.com) Register your domain name at http://www.domainpeople.com Status "HOLD" usually means that there's a problem with the domain, such as it's registration fee was not paid (or the credit card payment bounced) or it was registered with fake contact details.
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||