Are you concerned you are being scammed?
This is the finest resource we have come across, answering every question you can imagine on this subject of email frauds and scams :
20150905 Another scam:
Subject: RE: GOOD NEWS!!!
From: "Adams Rebecca (NHS WEST KENT CCG)"
Date: Sat, September 5, 2015 11:47 am
To: "Adams Rebecca (NHS WEST KENT CCG)"
BODY:
Contact Mr Harold for donation on (
haroldd1d@hotmail.com < mailto : haroldd1d @ hotmail.com > ) for info
* * * * * DO NOT CONTACT, THIS IS A SCAM * * * * *
Note of 20100125 :
We could do a Note a Day, with all the frauds and scams we receive in our emails.
Here is one from today :
From: rosemarybarry@cantv.net
Subject: RECEIVE YOUR CHECK FUND
Date: January 24, 2010 9:14:29 AM PST
To: rosemarybarry@.cantv.net
Reply-To: rosemarybarry@cantv.net
Dear Good Friend,
I take this liberty to inform you that the transaction we were pursuing
together has finally worked out by God's infinite mercy and favour.
I decided to contact you to let you share from the good news and help me in thanking
God for the abundance grace and favour that are flowing moving all over me.
I am happy to inform you that I am in India for Numerous business negotiations and establishment.
I arrived few days ago.
I am under going intensive Property and Capital investment project with
the foreign firm that helped me in realizing this transaction at last.
I have raised a duly signed and seal Certifies International Bank Check,
to the tune of USD$250,000 only in your name as compensation to your
concern and attente to help me.
PLS CONTACT MR BARRISTER barristerjohnson39@yahoo.com
as soon as posible so that he would deliver your check to you immedately without any delay.
He will advise you further about the shipment of the check to your
Residence Address or Office Address.
Sincerely
Rosemary
How many English errors can you count in that email above ?
Or this one, below.
Note of 20100122 : rita_spencer72@sify.com has all the markings of a scam email.
Look carefully at this letter ...
You will see it has many English errors easily seen in emails from ill-learned non-English users.
The Heading :
From: rita_spencer@mcKenna.com : this might be a real and valid email address being misused by the scammer. From addresses can be faked to look real.
Subject: Hello
Date: January 22, 2010 9:05:19 AM PST
To: undisclosed-recipients:;
Reply-To: rita_spencer72@sify.com
Hello
I am Rita Spencer esq., a solicitor at law.
the personal attorney /sole executor to the WILL of my late client ?
I have a message for you please return my mail for details.
Your Respond should be sent to my Private email:rita_spencer72@sify.com
GodBless You and Your Family.
Rita Spencer
rita_spencer72@sify.com
NOTE : If an attorney or other legal entity wants to contact you, they will mail you.
NOTE : If a barrister, lawyer, soliciter, etc., wants to contact you,
they will do so through the post, the legal mails, requiring proof of delivery.
NOTE : Do NOT FALL for these types of scams .. even if the From address looks real.
The FROM ADDRESS can be faked to look like it is from us, or anyone.
Note of 20091017
We have been informed by another reader of our site that they just received fake money orders.
Here are the details so you can know not to fall for this scam from a fellow name of Faisal Gill
He is also using the name of John Collins in Lumberton, North Carolina.
First, the letter from Nicole, a person who is currently unemployed, and yet the money orders were from her 'employer.'
Here, read her letter to us :
Dear Good Works On Earth,
I just want to take a moment and thank you for all of the information you provide about fraudulent money scams and your unfortunate involvement. I recently received by mail three postal money orders that look very legitimate apart from the fact that there is no ben franklin watermark visible from both sides, also I have called the post office and checked the serial numbers in their system and they show no record. I find this to be a very cruel scam. I lost my job on September first and am struggling to pay my bills and find work. I have thirty dollars to my name and will soon be on the street. Then I get this envelope in the mail with three money orders for $975.00 each. I didn't know what to think or do. Things like this never happen to me!! I thought it must be too good to be true, and so far, it seems that is the case indeed.
The only other thing in the envelope was the following note:
"GOOD DAY TO YOU,
I HAVE BEEN INSTRUCTED TO SEND YOU THIS PAYMENT AS I WAS TOLD YOU WORK AS THEIR COMPANIES REPRESENTATIVE,
PLEASE CONFIRM TO ME VIA EMAIL UPON RECEIPT OF THIS PAYMENT AND
DO COMMUNICATE WITH YOUR EMPLOYER THAT YOU HAVE RECEIVED FOR FURTHER INSTRUCTIONS TO BE GIVEN TO YOU,
PLEASE COMMUNICATE WITH ME VIA EMAIL AT fiasalgill@yahoo.com .
Regards,
Faisal Gill"
=================
I have provided this to you exactly as it reads, case sensitive.
Not only is the note quite odd to me, as I am not employed that I am aware of,
but the name of the signer on the money orders is different.
John Collins
3591 Lackey Street
Lumberton NC 28360
I am not sure what to think, but I am naturally suspicious.
I have looked up information on both names but did not find much, certainly not by way of incrimination at any rate.
I have emailed the contact referenced in the note to say that he did not specify the company he was instructed to do this by and to please provide that information ASAP.
This all took place yesterday morning and I have not heard back from him yet.
I plan on speaking to a live person at the post office momentarily as they are now open.
I just wanted to thank you because your correspondence has given me things to look for to hopefully help identify the scammer.
Thank you again, and if you can offer any assistance by way of additional information it is greatly appreciated.
God Bless,
Nicole H
We have heard from Nicole and she has proven the money orders are fake. Had she deposited them, she would have been asked to send part of the money to Mr. Collins.
Do not fall for these scams.
TAKE YOUR MONEY ORDERS TO THE POST OFFICE.
They know if the money orders are real or not.
And the fake money orders look very real.
=============
Active Scam Email received at Good Works On Earth on 20070713 :
This information is for you from Campbell Law Firm and I implore you to give it priority attention!
I wish to seek your cooperation and guidance for a possible investment representative following
an opportunity in my law firm that will be of immense benefit to you. I represent my sick client who
is presently indisposed and not able to handle some businesses due to his health problem as he
is currently here in London on a sick bed suffering from leukemia. Contact me in person with your
resume information and to discuss the modalities of this brief. Thanking you for your kind attention
in anticipation of your response ASAP. Respectfully submitted, Alexander Marshall QC,
Campbell Law Firm, 320 Bethnal Green Road Bethnal Green, London E2 0AH.
Tel: +44 (0) 701 112 8147. URL: http://www.campbell-law.co.uk
From : alexmarshall@campbell-law.co.uk
Reply to : alexomarshall1@hotmail.com
The above email is a scam.
We post this so you can see what one criminal scam looks like from the very beginning.
The below information will show you a US Money Order Postal Scam in great detail, so you can see what it looks like.
Good Works On Earth
has been hit with a Postal Money Order Fraud and Scam as of April 15th,
2005.
The United States Postal Service issued a Money Order Scam alert on
March 31, 2005, and we have been hit by the scammers.
If someone sends you money orders that you don't know ... be aware : Postal Money Orders are being counterfited.
: HERE IS THE ANSWER TO PROTECTING YOURSELF :
'Before going to your bank to deposit the money order, first go to the
post office counter
and
verify the
money order is
legitimate and that the amount is correct. It's that simple.'
Verifying the amount (with the clerk at the Post Office) is very important because many times the scam artist will create these fakes from real documents. They will buy a real postal money order for a maybe a dollar, then put the document number on the fake and change the amount to something in the thousands. If you only ask if the money order is real, the postal worker will rightfully tell you it is, but you will never know it is not for the amount written on the face, until it is too late.
http://www.azcentral.com/12news/consumer/articles/postalmoneyorder04042005-CR.html : note of 20080404 : link reported as broken
It IS that simple ... it was the first thing the postal inspector told
us ...
'If you had brought the money order to the front counter, any of
us could have
verified the validity of the money orders.' Eugene, Oregon's
Postal Clerk.
Our bank, Well's Fargo, looked at the money orders and said they
are good as gold.
Now, our bank has taken all the money out of our account, and we
are in debt to Wells Fargo
because we did issue several small checks to others in our work.
Fortunately, not alot.
Even after our bank accepted and credited the money orders, something
wasn't right
in Charles' letters and almost the entire amount was set into trust
as unspendable.
'Postal Inspector Jeff Long said it is easy to spot a counterfeit money
order.
On a real money order, there should be a watermark of Ben Franklin
on the left and a dark safety strip on the right.
You have the key data.
I add to it this address of the one
who caused the money orders to be sent to us,
he identifies himsElf as Charles Bassy
: charles_bassy@yahoo.com
On this very day, this man has given
us this phone number : 448717338621
Not being versed in long distance, I
cannot tell if that is valid or not.
He states he is in London this day.
He states his company is : 'Maco Consults,
we are into deep offshore consulting'
There is no 'Maco Consults' on google.
The return address of the brown envelope
you may have copied is showing as :
Tony Ben
37 Grunton Road London
E5 9JT
The issuer of the Money Orders shows
to be Kevin Thomas in Georgia, so ... gee, what gives here ?
Thank you for helping us figure out what
is happening, money orders wise, valid or not
The money orders turned out to be counterfeit. We were informed
by our bank of this fact on 20050419.
For the Record :
Money Orders Originated with these
#'s :
07016583956 20050405
Post Office # 328183 $1,000
07016583957 20050405
Post Office # 328183 $1,000
07016583958 20050405
Post Office # 328183 $1,000
Issuer : Kevin Thomas, Atlanta
Georgia
Paid to : Good Works On Earth
Person making the donation, and
causing the Money Orders to be issued to us : Charles Bassy :
Return-Path: charles_bassy@yahoo.com
X-Original-To:
lexigram@goodworksonearth.org
Delivered-To:
lexigram@goodworksonearth.org
Received: from localhost (localhost [127.0.0.1])
by mail.efn.org (Postfix) with ESMTP id 07A4813F00FD for
lexigram@goodworksonearth.org ;
Mon, 18 Apr 2005 12:45:30 -0700 (PDT)
Received: from mail.efn.org
([127.0.0.1]) by localhost (neo [127.0.0.1]) (amavisd-new, port 10024)
with
ESMTP id 30239-08 for lexigram@goodworksonearth.org;
Mon, 18 Apr 2005 12:45:29 -0700 (PDT)
Received: from web90209.mail.scd.yahoo.com
(web90209.mail.scd.yahoo.com [66.218.94.93]) by mail.efn.org
(Postfix) with SMTP id A202C13F00F0
for lexigram@goodworksonearth.org ; Mon, 18 Apr 2005 12:45:29 -0700
(PDT)
Received: (qmail 14980
invoked by uid 60001); 18 Apr 2005 19:39:37 -0000
Comment: DomainKeys? See
http ://antispam.yahoo.com/domainkeys
DomainKey-Signature:
a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com;
b=Lu5Nhi6/V65e7zKU0eb1NnvvpfQpVG6rZpmlS6VghQWWr9kOfZ347xknFvvgufXx/dL70SddHxEaorR7gqQinjkJ+1kFIO5MSEMyOk2GU6PCANiDVA5xmUc+uFMnp0/689ZZ9aHz+k5s30+CuFfVNbcsv8wY+Yx0EaXI3D+bSUw=
; Message-ID:
20050418193937.14978.qmail@web90209.mail.scd.yahoo.com
Received:
from [64.110.93.83] by web90209.mail.scd.yahoo.com via HTTP; Mon, 18 Apr
2005 12:39:37 PDT
Date:
Mon, 18 Apr 2005 12:39:37 -0700 (PDT)
From:
charles b : charles_bassy@yahoo.com
Subject:
i am now in london and please stop this abusive words - what more do you
want to
know??????????????
To:
Will I Am : lexigram@goodworksonearth.org :
In-Reply-To:
6667
MIME-Version:
1.0
Content-Type:
multipart/alternative; boundary='0-1395244500-1113853177=:14355'
X-Virus-Scanned:
by amavisd-new-20030616-p10 (Debian) at eugenefreenet.org
This is Charles' writing to us :
hi,
Will i dont like the use of certain words which you use in refering
to me. I dont play games you are the one playing games
and i have every reason to believe that you are.
I am Charles Bassy and not Kefide, I told you that the money
am asking you to refund is to a patner and not to me ( why
do you want this to be difficult?). I am a Briton
and heads a business that takes me round. I left the country some days
after Easter but am
back now. the name of my company is Maco Consults, we are into deep
offshore consulting. You are free to call me on 448717338621. Please
stop sweating me on this , am not happy with you. If you want me
to send you my picture i shall do that. I wonder why you are asking
all of these now you didnt when I did the pledging or when i sent the money.
However, i know you are trying not to do the wrong thing BUT who says
i want you to?
Charles
NOTE : KEFIDE ONYECHE is the name of the person Charles wanted us to
bankwire $2000 to in such a hurry.
Will responds :
Charles, Everyone I consult says
this looks like a scam.
I appreciate your understanding
of what is happening here.
If the bank tells me the money
order's clear ... your money is safe.
Otherwise ... there will be no
money in our account from these money orders, which means you are a fraud,
or your issuer is.
I have to wait for the bank ok.
Letter of 20050418
Greetings Charles ...
Prove to me this is not what is
happening with your money orders, please.
Thank you.
http://wcco.com/localnews/local_story_090095920.html : reported as a broken
link original link was : http://www.usps.com/postalinspectors/nrmoscam.htm
'The scam artist is simply looking
to recruit someone in the United States
to cash the money orders and return
the funds via wire transfer.'
It is entirely possible here, that
the money orders we deposited into our account are very good fakes.
If that is true, woes be unto
you, Sir ... and the horse you rode in on.
If that is not true ... only when
our bank clears our account, can I forward the money to your designee.
You see, I learned just this morning
that United States Postal Money Orders are capable of being
withdrawn from our account should
they prove to be fraudulent ... and ... our bank has the final word, even
though our bank already knew we
questioned the validity of the money orders due to the request you made
of us upon our
receipt of the envelope you sent
our attorney.
Our bank has frozen our account,
Sir ... until such time as these three money orders are proven by the United
States Postal
Office to be valid. The
last person I spoke to at our bank told me it can take up to 11 days, which
I find absurd. I am looking
for a quicker way to verify you,
and your money orders.
Until then, you can only sit in
peace.
You created this problem for yoursElf
...
I will not allow it to become a
crushing blow to Good Works On Earth.
I will perform as you requested,
after our bank gives the clearance on our account.
Right now ... our bank put our
account on alert due to this query of the deposits we made with them.
You see, if you are not aware,
it seems folks are doing what you are asking,
and Americans are being taken
for a financial ride. It seems the money orders are being created
as fakes.
I appreciate your understanding,
and patience.
Please, at this time, consider
all our communications to be property of the federal, state and local authorities
we are operating
under.
Thank You,
Will I Am
Executive Director
Good Works On Earth
a 501(c)3 non-profit corporation
performing our namesake.
On April 19th, 2005, we were informed by our bank
that these three money orders were counterfeit.
All funds were withdrawn from our account.
Fortunately, we did not do what the
scam artist asked us to do, which
is ... as soon as you deposit the
bogus money orders into the
account, they ask you to
wire money to someone.
We refused to issue any checks or wires until
the Money Orders cleared, which they did not.
Don't be scammed.
We weren't.
These are Charles' communications, so you can know what scam letters
look like.
31 March 2005
i am truelly sorry for raising your hopes without fulfilling the promise
but i dont think its enough for you to ran insults on me.
i dont like insults, you dont sound like you are truelly a child of
God in the business of philantropy but i understand that you are upset,
am sorry .
i have dirested my secretay to resend the donation (cos am still on
vacation ) to prove my sensirity, am real and not trying to be crafty ok?
thanks
Charles
You are reading these communications backwards in time ..
Will I Am :lexigram@goodworksonearth.org wrote:
And the Lord chose to not rise
during His three days ... He changed His mind ...
It was too difficult to do, and
those He was doing it for didn't really appreciate it anyway.
So, He changed his mind, letting
His followers drift without His energy of Love showing and so no promised
Love was shone.
Your religious reason for sharing
wasn't enough for you to create the real sharing, Charles.
Your religious reason for not
sharing isn't enough for you to let the one's expecting it know that it
will not arrive, Charles.
That is how little you truly care,
to leave people hanging like that.
No, Charles ...
You are not real, your caring
is shallow, your persistence in helping falsely professed, your christian
acts, impotent.
No, Charles .... your heart cares
not, you set us up for false hope, false healings of others through your
'donation,' and
now we have to go to others and
let them know your donations and your promises are all shallow nothings.
No, Charles .... we do not want
donations from folks like you, Charles ...
We do the work of Love, not mortifications.
We do the work of Life in the
Ascensions, not the false deaths of false promises.
No, Charles ...
We will never put oursElves in
a position of believing your words again.
Send your money to false religions
as they give their false promises of ascension to people, just as you have.
Bless the Ends of Your Days, Charles
...
Bless Your Ends of Days ...
hi,
i was interested in the donation but the mistake that arose from the delivery
kind of discouraged me.Anyway, the
donation was intended for
mortification as per the lent , if you know what i mean. But since lent
is over i wish to prospone
the donation to your organization
for now cos i donated to some other local organizations around here. But
i shall still
donate to you but later
ok . Charles
Will I Am : lexigram@goodworksonearth.org
wrote:
Greetings Charles ...
We have never had anyone promise a donation, and two weeks later it still
does not arrive, I don't know
what to think about this missing delivery.
Just letting you know, if you don't already ... no DHL delivery has occured
at our attorneys office.
I don't understand why you would write such letters, and then not perform.
We could very much use your donation, Charles ....
We very much looked forward to your donation, Charles.
We wish you well, Sir.
Bless,
Will I Am
Executive Director
charles b wrote:
Hi, Thank you very much for your patience and understanding
of what could have probably be the
problem. To start with you are very correct as to the fact that courier
services do not convey materials
to 'Box' i am trying to reach everybody on the chain. and when i am done,
be sure i will reach you
immediately .The mistake is from my secretary. The reason am interested
in assissting your organization
in its good works is nothing more than the fact that i am zealous to offer
something for humanitarian
purposes. And to show appreciation to God for haven spared my life this
far and the fact that we are in
lent. I do not intent to Go futher in that because its a personal thing
really So what i will do now is to
resend the check,after i must have cleared the air with my courier . i
use DHL this time to your
LAWYER, i shall even call him to let him know that a chek is been sent
in his name.
Charles
the order is $5000 but you will give the difference to my shipper when
he comes to
collect the book.
Charles First Communication to
Good Works On Earth : March 11th, 2005
hi,
i wish to enquire
for the avalability of the book 'title removed' and to pledge the amount
of $1000.
therefore, i
need you to reply me with the following details to be able to send a poster
oder/check to that effect...
NAME
ADDRESS
PHONE
Charles
Charles' Second Communication to
Good Works On Earth : March 15th :
HI,
I HAVE SENT
THE MORNEY ORDER . BUT NOTE THAT THE ORDER CONTAINS $5000.
SO, WHAT YOU WILL DO IS THAT,
WHEN YOU CASH THE ORDER, MY SHIPPER WILL COME AND COLLECT THE
BOOK ALONG
WITH MY BENEFITS .
CHARLES
Charles' Third Communication to
Good Works On Earth : March 16th :
hi, you got it all
wrong, you are pushy, take things one after the other.
what i mean to say is that an
Order of $5000 have been issued my client in your name ok?
However what i have pledged to
Good Works is $1000.00 , therefore the difference of $4000.00 will be paid
into an account
which will be given
you when you must have cashed
the money. after which my shipper will come to convey the books and other
things due to
me.
So, you can use half of
the donation for the tsunami victims (although my organization has done
alot on that) and the other
for your areas of
interest. and dont forget
that SOME PEOPLE ARE LEAVING THEIR DAILY LIVES ON HANDOUTS FROM GOD
-- T.D
JAKES
CHARLES
Charles' Fourth Communication to
Good Works On Earth : March 18th :
hi, you sound like am not
communicating , i feel bad about that.
the issue is that an Order has
been made. you ought to receive it by today or tomorow. am tracking
it .
the order is $5000 but you will
give the difference to my shipper when he comes to collect the book.
that i think is simple
enough.
there is nothing unclear about
my intentions and am not representing my organization on this pledge. its
personal. thank you
Charles
Charles' Fifth Communication to
Good Works On Earth : March 20th :
Hi, Thank
you very much for your patience and understanding of what could have
probably be the problem.
To start with you are very correct
as to the fact that courier services do not convey materials to 'Box' i
am trying to reach
everybody on the
chain. and when i am done, be
sure i will reach you immediately .The mistake is from my secretary.
The reason am interested in assissting
your organization in its good works is nothing more than the fact that
i am zealous to
offer something
for humanitarian purposes. And
to show appreciation to God for haven spared my life this far and the fact
that we are in lent. I
do not intent to
Go futher in that because its
a personal thing really.
So what i will do now is to resend
the check,after i must have cleared the air with my courier . i use DHL
this time to your
LAWYER, i shall
even call him to let him know
that a chek is been sent in his name.
Charles
Charles Sixth Communication to
Good Works On Earth : March 28th
hi, i was interested
in the donation but the mistake that arose from the delivery kind of discouraged
me.Anyway, the
donation was intended for mortification
as per the lent , if you know what i mean. But since lent is over i wish
to prospone the
donation to your organization
for now cos i donated to some other local organizations around here.
But i shall still donate to you
but later ok .
Charles
i shall donate later is
simply another false promise with false words.
This is 'Charles Bassy's' final letter to us, when we told him we are
pretty sure his Money Orders are fraudulent :
The odd thing about this letter is ... he 'suspended' his partner,
based on my saying his money orders might be fraudulent.
No body suspends a 'partner' on what might be true.
This man is a fraud and a fake.
20050419 :
hi,
FOR YOUR INFORMATION MY PATNER IN ATLANTA
HAS BEEN REPORTED TO THE FBI. AND IF NEED BE I SHALL FORWARD
EVERY INFO THAT WILL BE RELEVANT FOR HIS PROSECUTION. FOR NOW HE HAS
BEEN SUSPENDED. I STARTED SUSPECTING
FOUL PLAY,THE TIME YOU STARTED WONDERING ABOUT MY IDNTITY BUT UNTIL
THE AUTHORITIES PROVE THIS, I WANT YOU
TO BE CAREFUL THE WAY YOU REFER ME TO BE A SCAM ARTIST.
I HAVE ALSO MADE A REPRESENTATION THROUGH MY LAWYERS TO THE POLCE
DEPARTMENT IN OREGON , SO YOU ARE
ALSO BEEN INVESTIGATED NOW COS I HAVE EVERY REASON TO BELIEVE YOU ARE
FRAUD.
FOR NOW YOU AND MY ATLANTA PATNER ARE UNDER WATCH, AM STILL EXPECTING
YOUR CALL.
CHARLES
MD/CEO,
MACO CONSULTS LTD
LONDON
This communication is dated April 19th, 2005.
I am responding to Charles, who says he is not a criminal, and he asks
me to not release his name.
This is my first note to him letting him know his donation is fraudulent
:
Charles ... Your money orders have been proven to be counterfeit by the Postal
Inspectors.
So I say to you, Thank you for nothing. If you have any questions, you
can call our bank.
Otherwise, please know we will be posting this fraud data on our site.
Our account has been damaged by your scam, and you can bet we don't
appreciate it.
So much for your mortifications.
Good Works On Earth
On the 20th of April, Charles responds :
charles b wrote:
hi, Will, I want to let you know thaT
THE MOST IMPORTANT ASPECT OF AN ACTION IS THE INTENTION, THIS IS BECAUSE
ITS THE INTENTION THAT DETERMINES THE ACTION. i
DO NOT INTEND TO GIVE YOU A CHECK THAT IS COUNTERFIT BUT SHOULD IT TURN
OUT THAT WAY I WANT TO LET YOU KNOW THAT I TAKE RESPONSIBILTY FOR ANY INCONVINIENCE
OR EMBARRASMENT THIS WOULD HAVE CAAUSED YOUR ORGANIZATION. I AM DEEPLY
SORRY ABOUT IT. BUT NOTE THAT AM NOT A SCAM AND THE BEST THING
YOU COULD DO FOR ME NOW IS NOT TO LET OUT MY IDENTITY PLEASE. cHARLES
Will I Am : lexigram@goodworksonearth.org
wrote:
This is my response to his above note :
Greetings Charles ...
Prove it.
The inspectors say your money orders are counterfeit.
The bank withdrew the money from our account.
You have caused Good Works On Earth to go into debt.
Until you make good, the facts show you to be the point man on the
scam.
Had I wired you $2,000, Good Works On Earth would now be over $2,000
in debt.
Until you make good on the donation, your name, and all names involved,
are criminally suspect.
Our letter to Wells Fargo after receiving a fraudulent email with their
name in it, taking me to a fraudulent web site that looks exactly like
the real Wells Fargo site.
Subject: Fraud : Fake Wells Fargo Email
Date: Sat, 23 Apr 2005 07:59:29
-0700
From: Will I
Am : lexigram@goodworksonearth.org
Organization: Good Works On Earth
To:
fraud@wellsfargo.com
CC:
local-abuse@wellsfargo.com
bcc:
board of directors, investigators, journalists on source, attorney's office
Greetings,
I have reported this fraudulent email with fake Wells Fargo link to
the Fraud Report Form at
the Real Wells Fargo site on 20050423 at 07:58pst.
Bless,
Will I AM
Good Works On Earth
This is the original email with full headers on :
Return-Path:
nobody@orange.serverstoday.com
X-Original-To:
lexigram@goodworksonearth.org
Delivered-To:
lexigram@goodworksonearth.org
Received:
from localhost (localhost [127.0.0.1]) by mail.efn.org (Postfix) with ESMTP
id
9742A13F00F0 for
: lexigram@goodworksonearth.org; Sat, 23 Apr 2005 04:29:59 -0700 (PDT)
Received: from mail.efn.org ([127.0.0.1])
by localhost (neo [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 03721-09 for : lexigram@goodworksonearth.org;
Sat, 23 Apr 2005 04:29:59 -0700 (PDT)
Received: from orange.serverstoday.com
(unknown [216.67.241.142]) by mail.efn.org (Postfix) with
ESMTP id 11FE313F00ED for : lexigram@goodworksonearth.org;
Sat, 23 Apr 2005 04:29:58 -0700 (PDT)
Received: from nobody by orange.serverstoday.com with local (Exim
4.44) id 1DPIjX-00072h-RA for
lexigram@goodworksonearth.org; Sat, 23 Apr 2005 07:23:35 -0400
To: lexigram@goodworksonearth.org
Subject:
Action Required -- ID Verification
MIME-Version:
1.0
Content-type:
text/html; charset=iso-8859-1
From:
Wells Fargo : accounts@wellsfargo.com
Reply-To:
accounts@wellsfargo.com
X-Mailer:
PHP/4.3.10
Message-ID:
: E1DPIjX-00072h-RA@orange.serverstoday.com
Date:
Sat, 23 Apr 2005 07:23:35 -0400
X-AntiAbuse:
This header was added to track abuse, please include it with any abuse
report
X-AntiAbuse:
Primary Hostname - orange.serverstoday.com
X-AntiAbuse:
Original Domain - goodworksonearth.org
X-AntiAbuse:
Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse:
Sender Address Domain - orange.serverstoday.com
X-Source: X-Source-Args:
X-Source-Dir: X-Virus-Scanned: by amavisd-new-20030616-p10
(Debian) at eug
Dear Wells Fargo customer,
During our regular accounts verification, it has come to our attention
that your account may be slightly out of date or incomplete. This
irregularity can and must be fixed through the Wells Fargo Account
Confirmation process that takes 10 minutes to complete and involves
logging in and confirming your identity over a secure connection at:
Visible Link Showing in the Email is this :
http://www.wellsfargo.com/confirmation/secure/index.html
< VISIBILE IN THE EMAIL
^^^^^^^^^^^^^^^^^^^
However, the Actual Link,
hidden from view unless you mouse over the link, shows as this :
http://202.123.79.179/.update/www.wellsfargo.com/cgi-bin/onlinebanking/secure/index.htm
< HIDDEN UNDER VISIBLE LINK.
^^^^^^^^^^^^^ FRAUDULENT LINK !@#$%^&* DO NOT USE
Instead of going to the domain
of Well's Fargo, you go to 202.123.79.179
They ask you for your account
number and password.
If you give this information,
kiss your money goodbye.
If you have already fallen
for this gig, immediately call your bank representative and tell them what
you have done.
Remember ... what follows
below is part of a fraudulent letter.
If you choose to disregard this notification, your account might be
restricted and you will not be able to:
Access your account online
Pay your monthly bill online
Review and download monthly statements
Request a credit line increase or change your address
The above fraudulent letter looks real, except
for the link is hidden until you mouse it, and ... some letters will hide
the link, even when you mouse it .. so know this ... if a link doesn't
show when you mouse it or copy link it, you probably do not want to click
on the link directly.
You can sniff at it, but for your own sake, don't
click on them.
On the same subject as above, what follows is not a legitimate Bank
One letter.
We share this to show you what to look for on these types of false
letters.
Notice the underlying link below the www.bankone.com is fraudulent.
We made it bold, so it stands out.
Return-Path: www@legend-ic.com.tw : notice
the return path is not a bank address.
X-Original-To:
lexigram@goodworksonearth.org
Delivered-To:
lexigram@goodworksonearth.org
Received:
from localhost (localhost [127.0.0.1]) by mail.efn.org (Postfix) with ESMTP
id 5676113F031A for
: lexigram@goodworksonearth.org; Tue, 19 Apr 2005 23:53:07 -0700 (PDT)
Received:
from mail.efn.org ([127.0.0.1]) by localhost (neo [127.0.0.1]) (amavisd-new,
port 10024) with ESMTP id
07360-04 for : lexigram@goodworksonearth.org; Tue, 19 Apr 2005 23:53:07
-0700 (PDT)
Received:
from dns.legend-ic.com.tw (220-130-133-84.HINET-IP.hinet.net [220.130.133.84])
by mail.efn.org (Postfix)
with ESMTP id E371713F0319 for : lexigram@goodworksonearth.org; Tue,
19 Apr 2005 23:53:06 -0700 (PDT)
Received:
from localhost (localhost.legend-ic.com.tw [127.0.0.1]) by dns.legend-ic.com.tw
(Postfix) with ESMTP id
4987846A461 for lexigram@goodworksonearth.org; Wed, 20 Apr 2005 07:13:03
+0000 (GMT)
Received:
by dns.legend-ic.com.tw (Postfix, from userid 80) id 772C046A766; Wed,
20 Apr 2005 07:00:21 +0000 (GMT)
To:
lexigram@goodworksonearth.org
Subject:
Action Required -- ID Verification
MIME-Version:
1.0
Content-type:
text/html; charset=iso-8859-1
From:
Bank One : accounts@bankone.com
Reply-To:
accounts@bankone.com
X-Mailer:
PHP/4.3.9
Message-ID:
: 20050420070021.772C046A766@dns.legend-ic.com.tw
Date:
Wed, 20 Apr 2005 07:00:21 +0000 (GMT)
X-Virus-Scanned:
by AMaViS
X-Virus-Scanned:
by amavisd-new-20030616-p10 (Debian) at e
Dear Bank One customer,
During our regular accounts verification, it has come to our attention
that your account may be slightly out of date or incomplete. This
irregularity can and must be fixed through the Bank One Account Confirmation
process that takes 10 minutes to complete and involves
logging in and confirming your identity over a secure connection at:
[ The
link looks like this in the letter ]
http://www.bankone.com/confirmation/BolAnswersTop.aspx?top=you
[
The underlying link is actually this ] [ and this does not show, unless
you move your mouse over the link,
and with some letters, nothing will show when you mouse over the link.]
http://80.168.84.180/.bankone.com/confirmation/BolAnswersTop.aspx/secure/index.php
^^^^^^^^^^^^ Note well, the hidden number is the domain you will be sent
to, and it look just like the Wells Fargo site.
If you choose to disregard this notification, your account might be
restricted and you will not be able to:
Access your account online
Pay your monthly bill online
Review and download monthly statements
Request a credit line increase or change your address
The above letter is fraudulent, with a fake link underlying the 'real link.'
Further Proof :
Your message : Subject: Fraudulent letter : [Fwd: Action Required -- ID Verification]
was not delivered to: accounts@bankone.com
because: Recipient user name accounts (accounts@bankone.com) not unique.
Several matches found in Domino Directory.
Good Works On Earth
a 501(c)3 non-profit corporation performing its namesakes
Here, we share another fraud, with their expanded email header information :
From: avlcko@truman.edu
Subject: Mrs Elizabeth Smith
Date: December 12, 2009 3:45:59 AM PST
To: liz@smith.com
Return-Path: avlcko@truman.edu
Envelope-To: lexigram@goodworksonearth.org
Delivery-Date: Sat, 12 Dec 2009 03:46:08 -0800
Received: from uranium.truman.edu ([150.243.160.94]) by saturn.efndomains.org with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69) (envelope-from avlcko@truman.edu ) id 1NJQQG-000304-4Y for lexigram@goodworksonearth.org; Sat, 12 Dec 2009 03:46:08 -0800
Received: from exchange.truman.edu (zinc.truman.edu [150.243.160.70]) by uranium.truman.edu (Postfix) with ESMTP id F31F24CC93 for lexigram@goodworksonearth.org ; Sat, 12 Dec 2009 05:45:59 -0600 (CST)
X-Mimeole: Produced By Microsoft Exchange V6.5
Content-Class: urn:content-classes:message
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CA7B20.AC2D1242"
Message-Id: AB594FA140F2C645A55507CFD946FCB20C6560DD@zinc.truman.edu
X-Ms-Has-Attach:
X-Ms-Tnef-Correlator:
Thread-Topic: Mrs Elizabeth Smith
Thread-Index: Acp7IKgwsUa2x37JSnmr6EkbIZfIdA==
X-Spam-Status: No, score=1.4
X-Spam-Score: 14
X-Spam-Bar: +
X-Spam-Flag: NO
/\ we expanded the email header for identifications ==================
\/ the message
I am Mrs Elizabeth Smith, a devoted Christian. I have a foundation/Estate
uncompleted valued at 2.1 Million US Dollars and need you to help me
finish it because of my health, Everything is available. Please contact me
for more details. Private contact email:elizabeth.smith1960@nl.rogers.com
thank you
This message also comes in longer versions, with more details and pleadings and Christian salutations, usually.
The address of this page is :
https://www.goodworksonearth.org/fraud-united-states-postal-money-orders.html
Page Title :
Postal Money Orders - Scams and Scam Artists
Page Description :
We share with you what a Postal Money Order Scam looks like.
Key Words :
postal, money, order, bank, wire, scam, fraud, how to tell,
money orders, scams, prevent fraud, how to know
Actual Searches Folks made to arrive here :
counterfit money orders : counterfeit is the proper spelling
counterfited u.s. money orders : counterfited is the proper spelling
We are Flash Letters Empowered
This is the
Lover's Star Arts Trail Welcome to the Web of Love
Home of the
Letters Settler Home of the Book of Creations Eternal
Home of the Book of Names Eternal
Blessings Be and Thank You
~ Kathy Uno ~
The Letters Settler
Good Works On Earth is a 501(c)3 tax-exempt,
charitable and educational non-profit organization
Good Works On Earth All Rights ReServed World Wise
Burnishings to the
Gold Standard began on : 20051213
This page was last updated in some way on : 20160609
Prior update : 20130814
Have you read the Star Art of AMERICANS
North Americans, South Americans, Eastern Americans,
Western Americans or Central Americans ...
It's a scream, as Americans care ...
It's a song in the songster's care.
Can an anthem heal the hate ?
Can a ballad suspend time ?
A healing anthem can ..
An able ballad can ... AMERICANS The Star Art
The Song