Something Smells Phishy To Me…

Good Day,

My name is Dr (Mrs.) Faith Zenwakolo, a dying woman who has decided to donate what I have to charity through any thoughtful and selfless someone, I got your information while browsing through the internet, although I am not comfortable using this medium owing to the unsolicited emails everywhere but someone has to be used to save this transaction. So, I honestly crave your indulgence to digest and do what I have to say, please.

I am a 59 years old woman and was diagnosed for cancer about 2 years ago, after the death of my cheating spouse who had left me everything he worked for. I have decided to donate from what I have inherited from my late husband for charity through you since I cannot do it all by myself considering my circumstances.

I have WILLED/donated the sum of $3,500,000 (Three million five hundred thousand dollars) to you/Organization for the less privileged rather than allow my greedy relatives to use my husband’s hard earned funds inappropriately.

I will be going for an operation tomorrow morning and at the moment I cannot take any telephone calls, however, I have adjusted my WILL and my Executor is aware. Please, you and him should arrange the transfer of the funds from my Finance company to your humble self, wherever you are. Please contact my Executor with his private E-mail:

————————————————–
BARRISTER DAVID IMEGWU
barr_davidimegwu@post.ro
————————————————–

With your full names, phone/fax numbers and or your contact address and tell him you are the one that I have WILLED the sum of $3,500,000 to, for specific and good work.

I will appreciate your utmost confidentiality in this matter until the task is accomplished as I do not want anything that will jeopardize my last wish. I will try and be in contact with you at any given opportunity.

I wish you all the best and, please use the funds well and always extend the good work to others.

Regards,
Dr (Mrs.) Faith Zenwakolo

Note:
Dr Lang Spencer is my personal doctor and I am sending you this mail through his email.

She would have seen it coming if only she had read my Guide to Identifying Cheating Spouses

From: Simonyi@yahoo.com.hk
Reply-to: simon.yi33@gmail.com
Sent: 8/30/2008 4:17:28 A.M. Central Daylight Time
Subj: I NEED YOUR URGENT ASSISTANCE

DEAR FRIEND,

I am Mr.Simon Yi Executive Director of the Hang Seng Bank Ltd, Hong Kong.

An Iraqi named Haider Hanoon,a business man made a numbered fixed  deposit of (346,736,899.68 TWD) for 18 calendar months, this is valued  to Fourty Four million Five Hundred Thousand United State Dollars only  in my branch. Upon maturity several notice was sent to him, even  during the war, four years ago (2003). Again after the war another  notification was sent and still no response came from him. We later  found out that Haider Hanoon and his family had been killed during the  war in Gunfire that hit their home at Mukaradeeb where his personal  oil well was.

After further investigation it was also discovered that Haider Hanoon  did not declare any next of kin in his official papers including the  paper work of his bank deposit. And he also confided in me the last  time we was at my office that no one except me knew of his deposit in  my bank. So, Fourty Four million Five Hundred Thousand United State Dollars is still lying in my bank and no one will ever come forward to  claim it. What bothers me is that according to the laws of my country  at the expiration five years six months the funds will revert to the  ownership of the Hong Kong Government if nobody applies to claim the  funds.

My proposal, I am prepared to place you as the next of kin in a  position to instruct HANG SENG BANK to release the deposit to you as  the closest surviving relation. Upon receipt of the deposit, I am  prepared to share the money with you in half. That is: I will simply  nominate you as the next of kin and have them release the deposit to  you. We share the procentange 70/30. I would have gone ahead to ask  the funds be released to me, but that would have drawn a straight line  in my involvement in claiming the deposit.I assure you that I could  have the deposit released to you within a few days. I will simply  inform the bank of the final closing of the file relating to Haider  Hanoon I will then officially communicate with my Bank and instruct  them to release the deposit to you. With these: all is done. I am  aware of the consequences of this proposal.

I ask that if you find no interest in this project that you should  discard this mail. I ask that you do not be vindictive and  destructive. If my offer is of no appeal to you,delete this message  and forget I ever contacted you. Do not destroy my career because you do not approve of my proposal. You may not know this but people like  myself who have made tidy sums out of comparable situations run the  whole private banking sector. I am not a criminal and what I do, I do  not find against good conscience, this may be hard for you to  understand, but the dynamics of my industry dictates that I make this  move. Such opportunities only come ones way once in a lifetime. I  cannot let this chance pass me by, for once I find myself in total  control of my destiny. These chances wont pass me by. I ask that you  do not destroy my chance, if you will not work with me let me know and let me move on with my life but do not destroy me. I am a family man  and this is an opportunity to pro
vide them with new opportunities.

If you give me positive signals, I will initiate this process towards  a conclusion. I wish to inform you that should you contact me via  official channels; I will deny knowing you and about this project. I  repeat, I do not want you contacting me through my official phone  lines nor do I want you contacting me through my official email  account. Contact me only through the numbers I will provide for you  and also through the email account that i will provide therein in this  email. Further more be informed that the fact that you are a foreigner give  you the privilege to stand in as my deceased client beneficiary as my  deceased client had no relation all his family died with him during  the war and I can not use my relation because its not accepted here in  Hong Kong. Also I am very confident that we will be able to establish  the trust that is needed to complete this deal and all that I need  from the time been is your willingness and commitment so that we can end this in
the next one week.

What you need to understand about this transaction is that I will make  sure that it passes through all international banking laws regards to  this I will take care of all the expenses and the cost of retaining  the service of my Attorney to give the transaction the proper documentation that is required to perfect the finishing. Your only  obligation in this transaction will be to set up an offshore account  that can accommodate these funds and I will give you more light later  once you agree to partner with me. Like I said before there is no risk involve as it will pass through  international banking laws and all documents related to this  transaction will be sent to you by post for your perusal and trust.

I do not want any direct link between you and me. My official lines  are not secure lines as they are periodically monitored to assess our  level of customer care in line with our Total Quality Management  Policy. Please observe this instruction religiously. Please, again,  note I am a family man, I have wife and children. I send you this mail  not without a measure of fear as to what the consequences, but I know  within me that nothing ventured is nothing gained and that success and  riches never come easy or on a platter of gold. This is the one truth  I have learned from my private banking clients. Do not betray my  confidence. If we can be of one accord, we should plan a meeting,  soon. Should you be interested I will prefer you to send me your FULL NAMES,ADDRESS,OCCUPATION AND PHONE NUMBER.on the  email address below.

E-mail:simon.yi33@gmail.com

Your earliest response to this letter will be appreciated.

I await your response.

Mr.Simon Yi

Hanoon’s response to Simon, “May the fleas of a thousand camels infest your crotch and your arms be too short to scratch.”

From: garanga1@gmail.com
Reply-to: abrahamgarang1980@gmail.com
Sent: 9/2/2008 11:56:34 A.M. Central Daylight Time
Subj: FROM ABRAHAM GARANG

FROM ABRAHAM GARANG
KUALA LUMPUR
MALAYSIA.
EMAIL: abrahamgarang1980@gmail.com
Tel: +60149218162

Good Day.

I am Abraham Garang the second son of late Mr. John Garang who was until his death the vice president of Sudan in Africa. In brief, my late father was a strong opposition for over 20years until he was appointed the vice president on the 9th July 2005 by the United Nations Peace Team as an avenue to quench 20years civil war in Sudan. He died on the 31st of July 2005 following a helicopter crash along side with 12 others just 22 days after appointment as the vice president. What led to the crash is still unclear but i know my father was the target.

I am Currently residing in Kuala Lumpur, Malaysia as a student. Before the death of my father, he had taken me to Johannesburg to deposit the sum of US$20M (Twenty Million United States Dollars) in a security company undisclosed under my name , as if he foresaw the looming danger in Sudan,I contacted The security company  few days ago and i was told that the box is due for collection ,And they also told me that if i cannot come down to South Africa to collect the box, that they can send down the box to Malaysia through a diplomatic immunity, My father did not disclose the real contents of the box to the company, he only told them that it is family valuables, and the box is locked with Pin numbers which i alone Know.

Reason why i have contacted you is for you to come down to Malaysia meet me and we make arrangment on receiving the box from the diplomatic, My problem is that due to my status here as a student and only 24 years old ,I cannot open an account that can run the volume of this amount or even have any financial obligation talk less of investment here. Therefore, I prefer to have a business partner from overseas who has an idea of lucrative investment to come down here(Malaysia ) and take care of this arrangement with me and have the funds transferred to his account or company’s account for investment purpose .

For your efforts, i am prepared to offer you 30% of the total fund US$20M and 5% will be set aside for local and international expenses that may be incurred in the course of this transaction while 65% will be for me and my Sister for investment package in your country upon our arrival.Because at the end of this transaction i and my sister  will love to move down to your country.

Things you need to do

1 come down here ( MALAYSIA ) meet me in person and assist me to receive the box from the diplomatic agent that will be bringing it down here.
2 Open an account here in Malaysia under your name for onward transfer to your account in your copuntry
3 At the end of this transaction you will get me and my sister a Visa to come and study in your country while you help us invest our 65% in a lucrative business until we finish our studies.

Please, Do not entertain any fear as all documents to back you up will be provided,If we must do this transaction successfully, we must keep it away from ears of the public.Call me for confirmation upon receipt of this mail or better still email me a confirmation. And i must assure you that this transaction is 100% risk free and will be done legally to avoid any breach of law.

Please reply only to my private email which is abrahamgarang1980@gmail.com  and also it is important you call me on my number +60149218162 as soon as you get this mail

Best regards,

Abraham Garang

On a very serious note:  NEVER <EVER> travel to a foreign country to meet someone in a deal like this.  NEVER-EVER.  There are only 3 possible outcomes:  1.  You will be scammed.  2.  You will be robbed.  3.  You will be kidnapped and held for ransom.

Of course, you might also be murdered.

From: Alabama Central Credit Union [mailto:secure@alabamacentral.org]
Sent: Wednesday, September 03, 2008 9:56 AM
Subject: Security Update
Importance: High

Due to recent atacks targeting Alabama Central Credit Union we are pleased to introduce a fully upgraded Banking System.  This new feature will protect your Alabama Central Credit Union Visa Card.

How does it works:
Your card details will be encrypted using 128bit Secure Sockets Layer technology.
International transactions will be strictly monitored.
Access to your card over the internet will be more secure and more easy to use.

SERVICE : Secure my Card.
EXPIRATION: September 04, 2008

Take advantage of our new security upgrade now!
Click on the link below to proceed:
alabamacentral.org/upgrade/visa.card/login.html

We apologize for any inconvenience this may cause, and appreciate your assistance in helping us maintain the integrity of the entire banking system.

Best Regards,
Alabama Central Credit Union - 3601 4th Avenue So. Birmingham, AL 35222

Masked link pointed to:
mail.medigy.net/epublish/images/ac/ 

which then redirects the browser to:
212.62.250.94:84/accu/index.htm

From: williamsjohnson_wj6@yahoo.com
Reply-to: williamskkjohnson@gmail.com
Sent: 8/15/2008 9:19:43 A.M. Central Daylight Time
Subj: CONFIRMATION OF THE PAYMENT.

ATTN: RE: CONFIRMATION OF THE PAYMENT.

THIS LETTER IS BRING TO YOUR NOTICE THAT YOU’RE FUND HAS BEEN TRANSFER THROUGH ELECTRONIC BANKING TRANSFER SYSTEM OF PAYMENT. THIS SYSTEM OF PAYMENT WILL CREDIT YOUR FUND DIRECT TO YOUR BANK ACCOUNT IN SWIFT CODE NOTE” YOUR URGENT ACTION IS HIGHLY NEEDED TO RECEIVE THE ORIGINAL COPY OF THE TRANSFER SLIP TO ENABLE YOU TO CONFIRM YOUR FUND IN YOUR BANK ACCOUNT.

THIS SYSTEM OF PAYMENT IS TO CONTROL FRAUD, SCAM AND MONEY LAUNDERING IN AFRICAN IF YOU KNOW ANY PERSON FAMILY OR FRIEND THAT HAS LOST MONEY TO FRAUDSTERS PLEASE TELL HIM/HER TO WRITE TO THIS COMMISSION WITH PROVES AND WE WILL HANDLE HIS/HER CASE THEN PAY BACK AFTER VERIFICATION.

OUR ACTION NOW IS TO REFUND BACK MONEY TO FOREIGNERS WHO LOST MONEY TO THESE THIEF’S. WE ARE PAYING BACK FROM THE MONEY WE RECOVERED.

MR.WILLIAMS JOHNSON
0044-7031828628
0044-7031828629
WORD BANK LONDON

From: customerservice@financial.com
Sent: Friday, August 29, 2008 5:01 PM
To: [redacted]
Subject: MasterCard Fraud Prevention Alert

This is not a promotional e-mail. Please call us immediately at 1-800-291-1649 regarding recent restriction placed on your account. We’re available 24/7 to take your call. Please disregard this e-mail if you’ve already call us since the date this e-mail was sent.

We appreciate your prompt attention to this matter.

Thank you
Fraud Prevention Security Department
Ph. (800) 291-1649

This e-mail message is for the sole use of the intended recipient(s) and may contain confidential and privileged information.  Any unauthorized review, use, disclosure or distribution is prohibited.  If you are not the intended recipient, please contact the sender by e-mail and destroy all copies of the original message.

++++++++++++++++++++++++++++++++++++++++++

Investigator Notes:

Listen to the recording of what happened when I called the 800 number! 

    mc-vishing-attempt

From: notice@IRS.gov
Reply-to: do-not-reply@IRS.gov
Sent: 8/15/2008 4:30:25 A.M. Central Daylight Time
Subj: Tax refund value is $252.60

Dear Applicant:

After the last annual calculations of your fiscal activity we have determined that you are eligible to receive a tax refund under section 501(c) (3) of the Internal Revenue Code. Tax refund value is $252.60.

Please submit the tax refund request and allow us 3-6 days in order to IWP the data received.

If you distribute funds to other organization, your records must show wether they are exempt under section 497 (c) (15). In cases where the recipient org. is not exempt under section 497 (c) (15), you must have evidence the funds will be used for section 497 (c) (15) purposes.

If you distribute fund to individuals, you should keep case histories showing the recipient’s name and address; the purpose of the award; the maner of section; and the realtionship of the recipient to any of your officers, directors, trustees, members, or major contributors.

To access the form for your tax refund, please click here

This notification has been sent by the Internal Revenue Service, a bureau of the Department of the Treasury.

Sincerely Yours,
Director, Exempt. Organization
Rulings and Agreements Letter
Internal Revenue Service
——————————————————————————–
Note:
▪ If you received this message in your SPAM/BULK folder, that is because  of the restrictions implemented by your ISP
▪ For security reasons, we will record your ip address, the date and time.
▪ Deliberate wrong imputs are criminally pursued and indicted.

© Copyright 2008, Internal Revenue Service U.S.A.

CTGRNTZSEPWNLYBGRNMGNJLUKOZNBIWIHITZRD

Masked link pointed to:  ynair.co.kr:8080/TAX_Refunds/IRS/index.php

From: customers-support-id-56nl@tdbanknorth.com
To: [redacted]
Sent: 8/26/2008 4:28:43 P.M. Central Daylight Time
Subj: TDBanknorth Treasury Management Please Submit Your Login!

Dear TD Banknorth Treasury Management client,

Security and confidentiality are at the heart of the TD Banknorth. Your details (and your money) is protected by a number of technologies, including Secure Sockets Layer (SSL) encryption.

We would like to notify you that TD Banknorth Commercial carries out client details confirmation procedure that is compulsory for all TD Banknorth Commercial customers. This procedure is attributed to a routine banking software update.

Please login to TD Banknorth WebExpress using the link below and follow the instructions on the screen.

tdbanknorth.com/wcmfd/wcmpw/CustomerVerify.htm?taskid=21yekhnnwcssdyyDchyOkhb

TD Banknorth Commercial Customer Service

Masked link pointed to:

webexpress1.tdbanknorth.com.asp8.su/wcmfd/wcmpw/CustomerVerify.htm?cookie=21yekhnnwcssdyyDchyOkhb

++++++++++++++++++++++++++++++++++++++++++

From: survey@bankofhanover.com
Reply-to: do-not-reply@bankofhanover.com
Sent: 8/7/2008 3:53:55 A.M. Central Daylight Time
Subj: Bank of Hanover Online Survey ID : XZURGKDHEF

 
Congratulations!
Dear Customer,

You’ve been selected to take part in our quick and easy 9 questions survey In return we will credit $90.00 to your account - Just for your time!

Please spare two minutes of your time and take part in our online survey so we can improve our services.
Don’t miss this chance to change something.

To access the form please copy/paste the link below in your browser (or click the link):

avamehr.com:81/bankofhanover/survey/survey.php

Founded in 1835, Bank of Hanover is dedicated to building strong relationships with families, individuals and businesses within the communities we serve, everyday.

We pride ourselves in offering superior customer service with a personalized touch.
© Copyright 2008 Bank of Hanover is an affiliate of Sterling Financial Corporation which merged with The PNC Financial Services Group, Inc.
(NYSE:PNC) on April 4, 2008. All rights reserved.

Links to third-party sites are provided for your convenience.

Such sites may not follow the same privacy or security standards as ours. We do not endorse, approve, or control those sites.
Note:
* If you received this message in your SPAM/BULK folder, that is because  of the restrictions implemented by your ISP
* For security reasons, we will record your ip address, the date and time.
* Deliberate wrong imputs are criminally pursued and indicted.

Survey ID :

FJGIJTGHKGPTKPTGOGHXBLPBQQJYRVFMRTLOLE
++++++++++++++++++++++++++++++++++++++++++

Investigator Notes:

1.  The email was sent without a “To” field so that additional recipients could not be identified.  Most legitimate emails to account holders and customers are sent directly to the recipient’s email address and are often personalized with the account holder’s name in the email.

2.  The included link:

avamehr.com:81/bankofhanover/survey/survey.php

points to a website which is obviously not a Bank of Hanover website.  This entire email was a very amateur attempt.

3.  Bank accounts are the most desireable accounts to phishermen.  Extra precaution should always be taken when receiving suspicious emails ragarding bank accounts.

4.  Spelling and/or grammatical errors.  Layout problems.

++++++++++++++++++++++++++++++++++++++++++

From: security.alert@colonial.com
Sent: 8/8/2008 7:52:04 P.M. Central Daylight Time
Subj: Important Security Alert!!!

Dear Customer,

During Our Security Maintenance and SSL Secure Servers Upgrade, Our technical services team noticed a slight error on your personal information. This might be due to either of the following reasons :

1) A recent change in your personal information.

2) Your Account has been accessed from a Foreign IP.

3) Submitting invalid information during initial sign in process.

Due to this, you are requested to Update and Verify your information by following the link below.

To get started, please click the link below:

colonialbank.com/
*Important*

We have asked few additional information which is going to be the part of secure login process. These additional information will be asked during your future login security so, please provide all these info completely and correctly otherwise due to security reasons we may have to close your account temporarily.

We thank you for your prompt attention to this matter. Please understand that this is a security measure intended to help protect you and your account. We apologize for any inconvenience.

Colonial Bank Customers Support Service.
++++++++++++++++++++++++++++++++++++++++++

Investigator Notes:

1.  The email was sent without a “To” field so that additional recipients could not be identified.  Most legitimate emails to account holders and customers are sent directly to the recipient’s email address and are often personalized with the account holder’s name in the email.

2.  The included link, colonialbank.com, points to a URL which is obviously not a Colonial Bank website:

sign-art.co.kr/board/data/new3/col.html

It should be noted that this was one of the best “knock-off” websites that I have seen to date.  All links point to Colonial Bank’s actual website with the exception of the Username and Password Login form.  Once login information is entered the visitor is taken to an “identitiy confirmation” page where the scammers also attempt to get answers to common security questions.  This South Korea based fake website is one of the longer-lived ones I’ve come across, too, having been online now for several days.

3.  Bank accounts are the most desireable accounts to phishermen.  Extra precaution should always be taken when receiving suspicious emails ragarding bank accounts.

4.  Spelling and/or grammatical errors.