joewein.de LLC
Fighting spam and scams
on the Internet

Home / Blog / About us
Spam
419/Nigeria
Online fraud
jwSpamSpy
Contact

Email Spam Filter:
jwSpamSpy
Try it for free!

Google

 

419 Scam – "W.W.S LOTTERY (Paul Duffy)"

"W.W.S LOTTERY (Paul Duffy)" is a fake lottery run by a gang in Nigeria and the UK. The criminals try to get victims to wire US$ 1,200 to the UK by Western Union wire transfer.

Send us any replies by "claims agents", especially money demands and payment instructions, we will publish them here.

Please forward copies of fraud emails to the abuse department of the webmail address listed as the contact email for the "claims agent" and ask for the address to be suspended because it is used in a 419 fraud (see 419 FAQ).

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!

Reply by claims agent:

From: "Paul Duffy" <paulduffy12@yahoo.it>
To: Firstname Lastname <emailaddress>
Sent: Monday, 11 April, 2005 19:11
Subject: Congratulations
 
In response to your mail with Reference and Batch number Ref:EAAS/941OYI/04 
Batch:03/06/MA34, I wish to identify myself as Mr. Paul Duffy the fiduciary 
agent of the W.W.S LOTTERY Incharge of your account.
 
After I got your mail I had to check through our data base and found out 
that you are really a winner with the W.W.S LOTTERY and it is my duty to 
help you process your winning.
 
First you will need a Winner's Certificate which will cover you as the 
lucky winner of the Grand Cash Prize of US$500,000 because your Cash Prize 
will be paid to you by our Correspondent Bank here in LONDON through KTT 
TRANSFER and before they will make payment to you, they will request you 
to present to them the CLASSIFIED ORIGINAL COPY of your Winner's Certificate, 
which will be prepared in your favour as a winner and sent to you via 
Special Courier Service.
 
For this reason you will be needed to send to us, YOUR FULL NAMES AND 
ADDRESS, PRIVATE PHONE AND FAX NUMBER AND HOW YOU WANT YOUR GRAND CASH 
PRIZE TO BE PAID TO YOU. Your form will be sent to our Correspondent Bank 
and they will get in touch with you via phone or fax to inform you that 
your fund is ready for transfer and that you should present to them your 
proof of ownership to this fund, which is your Classified Original copy 
of this Winner's Certificate. If you cannot provide an account where your 
fund could be transferred to, please notify us as you will be needed to 
travel to our financial security company in Amsterdam, to recieve your 
fund in person. 
You may call me on +447040108691 or email me for more information . 
Fax:00448717338066
 
Once again "CONGRATULATIONS".
 
I await your urgent response to this mail.
 
Sincerely,
Paul Duffy.

Message headers:

Received: from [192.116.88.66] by web25707.mail.ukl.yahoo.com
 via HTTP; Mon, 11 Apr 2005 12:11:03 CEST
Date: Mon, 11 Apr 2005 12:11:03 +0200 (CEST)
From: Paul Duffy <paulduffy12@yahoo.it>
Subject: Congratulations

WHOIS details for sending network (IP 192.116.88.66):

     netname:      GILAT-SATCOM-BLOCK-19
     inetnum:      192.116.88.0 - 192.116.88.255
     netname:      GILAT-SATCOM-BLOCK-19
     descr:        Gilat-Satcom
     remarks:      For abuse issues related to Gilat, email abuse-gilat@012.net.il
     notify:       abuse-gilat@012.net.il
     country:      GB
     admin-c:      GS3350-RIPE
     tech-c:       GS3350-RIPE
     status:       ASSIGNED PA
     mnt-by:       AS9116-MNT
     mnt-lower:    AS9116-MNT
     changed:      lir@linux.goldenlines.net.il 20050102
     source:       RIPE
     
     route:        192.116.64.0/18
     descr:        Goldenlines
     remarks:      For addressing issues, email lir@linux.goldenlines.net.il
     remarks:      For abuse issues, email abuse@012.net.il
     origin:       AS9116
     mnt-by:       AS9116-MNT
     changed:      lir@linux.goldenlines.net.il 20041121
     source:       RIPE
     
     role:         Gilat Support
     address:      Gilat Satcom
     address:      21D Yagia Kapaim st. Petach-Tikva, Israel
     phone:        +972 3 9255000
     fax-no:       +972 3 9217938
     admin-c:      DR5299-RIPE
     admin-c:      GE2074-RIPE
     tech-c:       DR5299-RIPE
     tech-c:       GE2074-RIPE
     trouble:      abuse-gilat@012.net.il
     e-mail:       customer@gilat.net
     nic-hdl:      GS3350-RIPE
     mnt-by:       AS9116-MNT
     changed:      hank@att.net.il 20040909
     source:       RIPE


Paul Duffy (US$1200)

ATTN: Firstname Lastname,

RE:YOUR WINNERS CERTIFICATE IS READY.
 
WE HAVE FINALLY VERIFIED YOUR INFORMATIONS, YOUR ADDRESS AND PHONE NUMBER 
AND NAMES, AS WELL AS YOUR DATAS. ALL WAS AUTHENTICATED BY OUR VERIFICATION 
AGENT IN CANADA.
 
HOWEVER, SINCE THE CERTIFICATE IS YOUR PROOF OF WINNING AND IS THE DOCUMENT 
YOU NEED TO PRESENT TO OUR SECURITY FINANCE COMPANY BEFORE THEY CAN TRANSFER 
YOUR WINNING PRIZE TO YOU , WE WOULD NEED TO SEND THE CERTIFICATE BY COURIER 
MEANS TO YOU AS SOON AS YOU RESPOND. AS YOU KNOW THE RULES, YOU WOULD BEAR 
THE COST OF SENDING YOUR WINNER'S CERTIFICATE TO YOU.

I HAVE BEEN DIRECTED TO INFORM YOU OF THE TOTAL COST AND BREAKDOWN OF SENDING 
THE WINNER'S CERTIFICATE TO YOU BY SPECIAL COURIER SERVICE, WHICH WOULD BY 
IT'S NATURE GET TO YOU WITHIN 48 HOURS FROM WHEN IT IS SENT BY THIS OFFICE.
 
COST OF FRIEGHT (COURIER) DHL...........................60:00Pounds
INSURANCE FEES ON DOCUMENTS........................350:00Pounds 
ADMINSTRATIVE FEES...............................................200:00Pounds 
TOTAL............................................................610:00Pounds 
 
WE PREFER YOU SEND THE ABOVE COST AMOUNT THROUGH THE WESTERN UNION MONEY 
TRANSFER AS IT IS EASIER AND WOULD FACILITATE THE QUICK DESPATH OF YOUR 
WINNER'S CERTIFICATE. YOU SHOULD SEND TO OUR ACCOUNT OFFICER IN-CHARGE OF 
PAYMENT COLLECTION.
 
SEND TO:
NAME: JOHN ADAM
ADDRESS: LONDON, U.K.
 
AS SOON AS YOU SEND THE CHARGES THROUGH THE WESTERN UNION, DO SEND THE 
WESTERN UNION CONTROLE NUMBER, TEST QUESTION AND ANSWER TO THIS E-MAIL 
BOX FOR ADMINISTRATIVE PURPOSES AND FOR YOUR RECORDS.
 
SEND THE WESTERN UNION MTCN NUMBER AND ALSO THE TEXT AND ANSWER 
QUESTION.ALSO NOTE THAT YOU DO THIS ASAP SO THAT YOUR NAME WILL BE INCLUDED 
IN THE BATCH THAT IS LIVING FOR REMITTANCE OF THERE FUNDS TO THE SECURITY 
FINANCE COMPANY.
 
ONCE AGAIN WE SAY CONGRATULATION
 
REGARDS

Message headers:

Received: from [195.44.181.17] by web25704.mail.ukl.yahoo.com
 via HTTP; Tue, 12 Apr 2005 10:36:44 CEST
Date: Tue, 12 Apr 2005 10:36:44 +0200 (CEST)
From: Paul Duffy <paulduffy12@yahoo.it>
Subject: YOUR WINNER CERTIFICATE IS READY

WHOIS details for sending network (IP 195.44.181.17):

     inetnum:      195.44.176.0 - 195.44.183.255
     netname:      CW-NITEL-RESERVED-NET
     descr:        Net reserved for customer NITEL
     country:      GB
     admin-c:      GNOC4-RIPE
     admin-c:      IH22-ORG
     admin-c:      NTL1-RIPE
     tech-c:       GNOC4-RIPE
     status:       SUB-ALLOCATED PA
     notify:       ipadmin@eu.cw.net
     mnt-by:       CW-IPGNOC-MNT
     mnt-lower:    CW-EUROPE-GSOC
     mnt-lower:    AS5378-MNT
     mnt-domains:  AS5378-MNT
     changed:      tcremer@de.cw.net 20041014
     changed:      tcremer@de.cw.net 20041119
     source:       RIPE
     
     route:        195.44.176.0/21
     descr:        Route for customer NITEL
     origin:       AS1273
     mnt-by:       CW-EUROPE-GSOC
     changed:      tcremer@de.cw.net 20041028
     source:       RIPE
     
     role:         Internet Network Services Technical Department
     address:      Cable and Wireless UK Operations
     address:      76 Hammersmith Road
     address:      Hammersmith
     address:      London,
     address:      GB
     phone:        +44 20 7825 6000
     fax-no:       +44 20 7825 6000
     e-mail:       support@uk.cw.net
     trouble:      ------------------------------------------------
     trouble:      Please do NOT e-mail abuse to the contacts given
     trouble:      here, e-mail them to abuse@uk.cw.net instead.
     trouble:      ------------------------------------------------
     trouble:      Network Status Page: http://www1.uk.cw.net/
     trouble:      Information: http://www.cw.com/
     trouble:      ------------------------------------------------
     trouble:      ** Contact by E-Mail ONLY. ***
     trouble:      ------------------------------------------------
     admin-c:      RW1210-RIPE
     tech-c:       RW1210-RIPE
     tech-c:       FM466-RIPE
     tech-c:       JH71-RIPE
     tech-c:       RC1510-RIPE
     tech-c:       FM1414-RIPE
     tech-c:       SM2390-RIPE
     tech-c:       AM3376-RIPE
     notify:       hm-dbm-msgs@ripe.net
     nic-hdl:      IH22-ORG
     mnt-by:       AS5378-MNT
     changed:      rob@uk.cw.net 20031021
     source:       RIPE
     
     role:         Cable and Wireless IP GNOC Munich
     remarks:      IP Admin Department
     address:      Landsbergerstr. 155
     address:      80687 Munich
     address:      Germany
     e-mail:       ipadmin@de.cw.net
     admin-c:      UK808-RIPE
     tech-c:       TOC-RIPE
     tech-c:       HRO-RIPE
     tech-c:       SM6163-RIPE
     nic-hdl:      GNOC4-RIPE
     mnt-by:       CW-IPGNOC-MNT
     changed:      tcremer@de.cw.net 20040203
     changed:      tcremer@de.cw.net 20040727
     changed:      tcremer@de.cw.net 20041105
     source:       RIPE
     
     role:         Nigeria Telecommunications Limited
     address:      No 2 Bissau Street
     address:      Wuse zone 6, Abuja
     address:      F.C.T.
     address:      Nigeria
     e-mail:       info@nitelnet.com
     org:          ORG-NTL4-RIPE
     admin-c:      KUO1-RIPE
     tech-c:       LdW10-RIPE
     tech-c:       AS7075-RIPE
     nic-hdl:      NTL1-RIPE
     mnt-by:       CW-IPGNOC-MNT
     changed:      tcremer@de.cw.net 20041117
     source:       RIPE

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!