|
419 Scam – "W.W.S LOTTERY (Paul Duffy)"
"W.W.S LOTTERY (Paul Duffy)" is a fake lottery run by a gang in Nigeria and the UK. The criminals try to get victims to wire US$ 1,200 to the UK by Western Union wire transfer. Send us any replies by "claims agents", especially money demands and payment instructions, we will publish them here. Please forward copies of fraud emails to the abuse department of the webmail address listed as the contact email for the "claims agent" and ask for the address to be suspended because it is used in a 419 fraud (see 419 FAQ).
From: "Paul Duffy" <paulduffy12@yahoo.it> To: Firstname Lastname <emailaddress> Sent: Monday, 11 April, 2005 19:11 Subject: Congratulations In response to your mail with Reference and Batch number Ref:EAAS/941OYI/04 Batch:03/06/MA34, I wish to identify myself as Mr. Paul Duffy the fiduciary agent of the W.W.S LOTTERY Incharge of your account. After I got your mail I had to check through our data base and found out that you are really a winner with the W.W.S LOTTERY and it is my duty to help you process your winning. First you will need a Winner's Certificate which will cover you as the lucky winner of the Grand Cash Prize of US$500,000 because your Cash Prize will be paid to you by our Correspondent Bank here in LONDON through KTT TRANSFER and before they will make payment to you, they will request you to present to them the CLASSIFIED ORIGINAL COPY of your Winner's Certificate, which will be prepared in your favour as a winner and sent to you via Special Courier Service. For this reason you will be needed to send to us, YOUR FULL NAMES AND ADDRESS, PRIVATE PHONE AND FAX NUMBER AND HOW YOU WANT YOUR GRAND CASH PRIZE TO BE PAID TO YOU. Your form will be sent to our Correspondent Bank and they will get in touch with you via phone or fax to inform you that your fund is ready for transfer and that you should present to them your proof of ownership to this fund, which is your Classified Original copy of this Winner's Certificate. If you cannot provide an account where your fund could be transferred to, please notify us as you will be needed to travel to our financial security company in Amsterdam, to recieve your fund in person. You may call me on +447040108691 or email me for more information . Fax:00448717338066 Once again "CONGRATULATIONS". I await your urgent response to this mail. Sincerely, Paul Duffy. Message headers: Received: from [192.116.88.66] by web25707.mail.ukl.yahoo.com via HTTP; Mon, 11 Apr 2005 12:11:03 CEST Date: Mon, 11 Apr 2005 12:11:03 +0200 (CEST) From: Paul Duffy <paulduffy12@yahoo.it> Subject: Congratulations
WHOIS details for sending network (IP 192.116.88.66):
netname: GILAT-SATCOM-BLOCK-19
inetnum: 192.116.88.0 - 192.116.88.255
netname: GILAT-SATCOM-BLOCK-19
descr: Gilat-Satcom
remarks: For abuse issues related to Gilat, email abuse-gilat@012.net.il
notify: abuse-gilat@012.net.il
country: GB
admin-c: GS3350-RIPE
tech-c: GS3350-RIPE
status: ASSIGNED PA
mnt-by: AS9116-MNT
mnt-lower: AS9116-MNT
changed: lir@linux.goldenlines.net.il 20050102
source: RIPE
route: 192.116.64.0/18
descr: Goldenlines
remarks: For addressing issues, email lir@linux.goldenlines.net.il
remarks: For abuse issues, email abuse@012.net.il
origin: AS9116
mnt-by: AS9116-MNT
changed: lir@linux.goldenlines.net.il 20041121
source: RIPE
role: Gilat Support
address: Gilat Satcom
address: 21D Yagia Kapaim st. Petach-Tikva, Israel
phone: +972 3 9255000
fax-no: +972 3 9217938
admin-c: DR5299-RIPE
admin-c: GE2074-RIPE
tech-c: DR5299-RIPE
tech-c: GE2074-RIPE
trouble: abuse-gilat@012.net.il
e-mail: customer@gilat.net
nic-hdl: GS3350-RIPE
mnt-by: AS9116-MNT
changed: hank@att.net.il 20040909
source: RIPE
ATTN: Firstname Lastname, RE:YOUR WINNERS CERTIFICATE IS READY. WE HAVE FINALLY VERIFIED YOUR INFORMATIONS, YOUR ADDRESS AND PHONE NUMBER AND NAMES, AS WELL AS YOUR DATAS. ALL WAS AUTHENTICATED BY OUR VERIFICATION AGENT IN CANADA. HOWEVER, SINCE THE CERTIFICATE IS YOUR PROOF OF WINNING AND IS THE DOCUMENT YOU NEED TO PRESENT TO OUR SECURITY FINANCE COMPANY BEFORE THEY CAN TRANSFER YOUR WINNING PRIZE TO YOU , WE WOULD NEED TO SEND THE CERTIFICATE BY COURIER MEANS TO YOU AS SOON AS YOU RESPOND. AS YOU KNOW THE RULES, YOU WOULD BEAR THE COST OF SENDING YOUR WINNER'S CERTIFICATE TO YOU. I HAVE BEEN DIRECTED TO INFORM YOU OF THE TOTAL COST AND BREAKDOWN OF SENDING THE WINNER'S CERTIFICATE TO YOU BY SPECIAL COURIER SERVICE, WHICH WOULD BY IT'S NATURE GET TO YOU WITHIN 48 HOURS FROM WHEN IT IS SENT BY THIS OFFICE. COST OF FRIEGHT (COURIER) DHL...........................60:00Pounds INSURANCE FEES ON DOCUMENTS........................350:00Pounds ADMINSTRATIVE FEES...............................................200:00Pounds TOTAL............................................................610:00Pounds WE PREFER YOU SEND THE ABOVE COST AMOUNT THROUGH THE WESTERN UNION MONEY TRANSFER AS IT IS EASIER AND WOULD FACILITATE THE QUICK DESPATH OF YOUR WINNER'S CERTIFICATE. YOU SHOULD SEND TO OUR ACCOUNT OFFICER IN-CHARGE OF PAYMENT COLLECTION. SEND TO: NAME: JOHN ADAM ADDRESS: LONDON, U.K. AS SOON AS YOU SEND THE CHARGES THROUGH THE WESTERN UNION, DO SEND THE WESTERN UNION CONTROLE NUMBER, TEST QUESTION AND ANSWER TO THIS E-MAIL BOX FOR ADMINISTRATIVE PURPOSES AND FOR YOUR RECORDS. SEND THE WESTERN UNION MTCN NUMBER AND ALSO THE TEXT AND ANSWER QUESTION.ALSO NOTE THAT YOU DO THIS ASAP SO THAT YOUR NAME WILL BE INCLUDED IN THE BATCH THAT IS LIVING FOR REMITTANCE OF THERE FUNDS TO THE SECURITY FINANCE COMPANY. ONCE AGAIN WE SAY CONGRATULATION REGARDS Message headers: Received: from [195.44.181.17] by web25704.mail.ukl.yahoo.com via HTTP; Tue, 12 Apr 2005 10:36:44 CEST Date: Tue, 12 Apr 2005 10:36:44 +0200 (CEST) From: Paul Duffy <paulduffy12@yahoo.it> Subject: YOUR WINNER CERTIFICATE IS READY
WHOIS details for sending network (IP 195.44.181.17):
inetnum: 195.44.176.0 - 195.44.183.255
netname: CW-NITEL-RESERVED-NET
descr: Net reserved for customer NITEL
country: GB
admin-c: GNOC4-RIPE
admin-c: IH22-ORG
admin-c: NTL1-RIPE
tech-c: GNOC4-RIPE
status: SUB-ALLOCATED PA
notify: ipadmin@eu.cw.net
mnt-by: CW-IPGNOC-MNT
mnt-lower: CW-EUROPE-GSOC
mnt-lower: AS5378-MNT
mnt-domains: AS5378-MNT
changed: tcremer@de.cw.net 20041014
changed: tcremer@de.cw.net 20041119
source: RIPE
route: 195.44.176.0/21
descr: Route for customer NITEL
origin: AS1273
mnt-by: CW-EUROPE-GSOC
changed: tcremer@de.cw.net 20041028
source: RIPE
role: Internet Network Services Technical Department
address: Cable and Wireless UK Operations
address: 76 Hammersmith Road
address: Hammersmith
address: London,
address: GB
phone: +44 20 7825 6000
fax-no: +44 20 7825 6000
e-mail: support@uk.cw.net
trouble: ------------------------------------------------
trouble: Please do NOT e-mail abuse to the contacts given
trouble: here, e-mail them to abuse@uk.cw.net instead.
trouble: ------------------------------------------------
trouble: Network Status Page: http://www1.uk.cw.net/
trouble: Information: http://www.cw.com/
trouble: ------------------------------------------------
trouble: ** Contact by E-Mail ONLY. ***
trouble: ------------------------------------------------
admin-c: RW1210-RIPE
tech-c: RW1210-RIPE
tech-c: FM466-RIPE
tech-c: JH71-RIPE
tech-c: RC1510-RIPE
tech-c: FM1414-RIPE
tech-c: SM2390-RIPE
tech-c: AM3376-RIPE
notify: hm-dbm-msgs@ripe.net
nic-hdl: IH22-ORG
mnt-by: AS5378-MNT
changed: rob@uk.cw.net 20031021
source: RIPE
role: Cable and Wireless IP GNOC Munich
remarks: IP Admin Department
address: Landsbergerstr. 155
address: 80687 Munich
address: Germany
e-mail: ipadmin@de.cw.net
admin-c: UK808-RIPE
tech-c: TOC-RIPE
tech-c: HRO-RIPE
tech-c: SM6163-RIPE
nic-hdl: GNOC4-RIPE
mnt-by: CW-IPGNOC-MNT
changed: tcremer@de.cw.net 20040203
changed: tcremer@de.cw.net 20040727
changed: tcremer@de.cw.net 20041105
source: RIPE
role: Nigeria Telecommunications Limited
address: No 2 Bissau Street
address: Wuse zone 6, Abuja
address: F.C.T.
address: Nigeria
e-mail: info@nitelnet.com
org: ORG-NTL4-RIPE
admin-c: KUO1-RIPE
tech-c: LdW10-RIPE
tech-c: AS7075-RIPE
nic-hdl: NTL1-RIPE
mnt-by: CW-IPGNOC-MNT
changed: tcremer@de.cw.net 20041117
source: RIPE
|