Banner Exchange

Google Search

8/30/07

IRS refund scam email going around again

The scammers who try to lure you in with an unexpected IRS refund are at it again. I disabled the link within the email to prevent anyone from accidentally clicking on it.

X-AOL-UID: 3226.410144305
X-AOL-DATE: Thu, 30 Aug 2007 8:40:23 AM Eastern Daylight Time
Return-Path:
Received: from rly-ma05.mail.aol.com (rly-ma05.mail.aol.com [172.20.116.49]) by air-ma05.mail.aol.com (v119.9) with ESMTP id MAILINMA054-8ae46d6ba9d37e; Thu, 30 Aug 2007 08:40:22 -0400
Received: from server.pmnhost.net (pmnhost.net [69.50.210.177]) by rly-ma05.mail.aol.com (v119.9) with ESMTP id MAILRELAYINMA058-8ae46d6ba9d37e; Thu, 30 Aug 2007 08:39:58 -0400
Received: from [207.210.33.31] (helo=User)
by server.pmnhost.net with esmtpa (Exim 4.66)
(envelope-from )
id 1IQjIT-0001XG-Rq; Thu, 30 Aug 2007 05:38:54 -0700
Reply-To:
From: "Internal Revenue Service"
Subject: Refund Tax
Date: Thu, 30 Aug 2007 08:38:41 -0400
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.pmnhost.net
X-AntiAbuse: Original Domain - aol.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - IRS.GOV
X-Source:
X-Source-Args:
X-Source-Dir:
X-AOL-IP: 69.50.210.177
X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_helo :
X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_822_from :
X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_from :
Message-ID: <200708300839.8ae46d6ba9d37e@rly-ma05.mail.aol.com>


After the last annual calculations of your fiscal activity we have determined that
you are eligible to receive a tax refund of $109.30.Please submit the tax refund request and allow us 6-9 days in order to process it.
A refund can be delayed for a variety of reasons. For example submitting invalid records or applying after the deadline.
To access the form for your tax refund,
please click here. //www.aliciagiron.com/archivos/img/index.html"click here
Internal Revenue Service>
Copyright 2007,
Internal Revenue Service U.S.A

Monster finally acknowledges they have a problem with phishing emails

Okay for anyone who does happen to read my blog you'll notice I posted back in June about getting bogus "Job offers" through Monster.com and hotjobs.com. Monster FINALLY reported this past week that they were victims of malicious coders. I am sure Monster knew about this way before announcing it. Mainly because out of all the job seekers on Monster.com I really doubt I was the only one reporting the fake job offers that were coming through their system. I didn't hear one thing from Monster nothing like, "yeah we are looking into this" or "Thanks for bringing this to our attention." Oh no the only communication I get is a canned response saying "Ooops". I guess it's better than nothing. Below is the email I got from Monster.

Dear Valued Monster Customer,

Protecting the job seekers who use our website is a top priority, and we value the trust you place in Monster. Regrettably, opportunistic criminals are increasingly using the Internet for illegitimate purposes. As is the case with many companies that maintain large databases of information, Monster is from time to time subject to attempts to illegally extract information from its database.

As you may be aware, the Monster resume database was recently the target of malicious activity that involved the illegal downloading of information such as names, addresses, phone numbers, and email addresses for some of our job seekers with resumes posted on Monster sites. Monster responded to this specific incident by conducting a comprehensive review of internal processes and procedures, notified those job seekers that their contact records had been downloaded illegally, and shut down a rogue server that was hosting these records.

The Company has determined that this incident is not the first time Monster's database has been the target of criminal activity. Due to the significant amount of uncertainty in determining which individual job seekers may have been impacted, Monster felt that it was in your best interest to take the precautionary steps of reaching out to you and all Monster job seekers regarding this issue. Monster believes illegally downloaded contact information may be used to lure job seekers into opening a "phishing" email that attempts to acquire financial information or lure job seekers into fraudulent financial transactions. This has been the case in similar attacks on other websites.

We want to inform you about preventive measures you can take to protect yourself from online fraud. While no company can completely prevent unauthorized access to data, we believe that by reaching out to job seekers like you, the Company can help users better defend themselves against those who have attacked Monster as well as other databases.

We are committed to maintaining an ongoing dialogue with all of our job seekers about Internet security and the steps Monster is taking to protect its job seekers. The Company has placed a security alert on Monster sites offering information to educate you about online fraud. This information can be found at http://help.monster.com/besafe/. We have also included information on Internet safety and examples of fraudulent "phishing" emails at the bottom of this letter.

Monster has launched a series of initiatives to enhance and to protect the information you have entrusted to us. Some of these steps are being immediately implemented, while others will be put into place as appropriate.

We believe these actions are the responsible steps to protect the trust you place in Monster. We are also working with Monster's hundreds of thousands of employer customers to ensure a safe and effective online job search. We will continue to share information with you about the enhancements we are making as we serve as your online career resource partner. We invite you to keep reading to learn more about how to use the Internet safely.

Sincerely,


Sal Iannuzzi

Chairman and CEO

Monster Worldwide

This email also came with tips on how to use the Internet safely. Here's a tip don't click ANY BANNERS on the Monster.com site. Since Monster has come clean maybe some other sites like Hotjobs should step up to the podium and join Monster. I doubt Monster was the only job site that was targeted.

8/27/07

Your account has been suspended! SCAM!

Okay, you sit down at your computer to check your email and you see this in "Your account has been suspended, blah, blah, blah". You guy reaction, crap. You open the email and there are instructions telling you to click on the link below and all your problems will go away. DON'T DO IT! Why? You may ask. Chances are it's a scam. Any company that does business on line or allows it's customers to sign up for on line accounts will never ask you to click on the link embedded in an email. If they do, they are stupid and are opening themselves and their customers up to scams. How they work, simple a person gets the scam mail and clicks on the link in the email. Now just because a link may look like www.yourbank.com does not mean you will be taken to your bank's homepage. The embedded link you click on can be a totally different web page all together. Remember an embedded link is used to link a website to words in an email, web page, or document, it does not have to words displayed do not have to be the same name as the website it's linked to for example Click Here Sure there maybe a website out that www.clickhere.com but if you click on the link here your coming back to this post. What the scammer does is place the words (www.bankofamerica.com) in the email but links the words to their own site which can look like a real site. However, if someone were to look in their URL address of the page the url could read something like this http://www.pogs.aspx. Below is a list of tale, tale signs the suspension email is bogus.

1. The email is pretty basic and does not have any company logos or branding. Example no company logos and or the font is different then other real communications you see. Most companies have standards right down to the type of font they use.

2. The email is from a company you've never had an account with.

3. Email instructs you to click on the link embedded in the email.

4. The TO: email address is not your email address or it says UNDISCLOSED RECIPIENTS

5. The misspelling of words, especially in job titles.

6. Conflicting reasons why this highly important email was sent.


Also, here are some examples of the scam mails. You'll notice my commentary in green.

Halifax Bank Account Suspension notice scam
X-AOL-UID: 3162.430522728
X-AOL-DATE: Mon, 27 Aug 2007 3:57:39 PM Eastern Daylight Time
Return-Path:
Received: from rly-mf07.mail.aol.com (rly-mf07.mail.aol.com [172.20.29.177]) by air-mf06.mail.aol.com (v119.7) with ESMTP id MAILINMF061-97146d32c85285; Mon, 27 Aug 2007 15:57:38 -0400
Received: from terahost.de (terahost.de [86.110.94.3]) by rly-mf07.mail.aol.com (v119.7) with ESMTP id MAILRELAYINMF077-97146d32c85285; Mon, 27 Aug 2007 15:56:54 -0400
Received: (qmail 11540 invoked by uid 33); 27 Aug 2007 21:55:46 +0200
Date: 27 Aug 2007 21:55:46 +0200
Message-ID: <20070827195546.11537.qmail@terahost.de>
To: barrudaki@aol.com
Subject: Online Banking Suspended: Update Your Online Service
From: Halifax Bank
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
X-AOL-IP: 86.110.94.3
X-Mailer: Unknown (No Version)

You'll notice this email has logos in it, however they are linked from the actual site as opposed to being embedded in the email. This means the scammer linked the logos instead of saving them to a hard drive for reference, this is because the referenced logos would identify which computer was used to embed them so the scam just links to the logo instead.

Online Logo

Dear Valued HALIFAX Costumer:

Due to concerns, for the safety and integrity of the HALIFAX
account we have issued this warning message.

It has come to our attention that your Halifax account information needs to be
updated as part of our continuing
commitment to protect your account and to
reduce the instance of fraud on our website.
If you could please take 5-10 minutes
out of your online experience and update your personal records you will not run into
any future problems with the online service.

Once you have updated your account records your HALIFAX account
service will not be interrupted
and will continue as normal.

To update your HALIFAX records click on the following link:
http://www.halifax-online.co.uk/onlineservices/login.asp
If you right click on the link and select Properties you will see the real web page you are sent to, for this example the web page is http://aefona.org////language/formslogin.htm
IMPORTANT:

If you do not confirm your current IP address until August 25, 2007, your account will be SUSPENDED for security reasons and we will send you a new Access Code by post which you will need to reactivate your online banking service access. You will receive this within seven days if your current IP address is not confirmed.

James T. Hopkins
Online Security Advisor,
Halifax Bank PLC.

NOTE:
You will be required to login to you account. Please ensure that you do not do this in a public internet cafe.

Please do not reply to this e-mail. Mail sent to this address cannot be answered.
For assistance, log in to your Halifax Bank PLC account and choose the "Help" link on any page.
© HALIFAX Bank PLC 2007. All Rights Reserved.

I don't have an account with Halifax bank and the link in the email goes to somewhere not even remotely associated with Halifax Bank. Next please.

AOL account email scam
X-AOL-UID: 3331.408319955
X-AOL-DATE: Sat, 25 Aug 2007 6:15:21 AM Eastern Daylight Time
Return-Path:
Received: from rly-xa01.mx.aol.com (rly-xa01.mail.aol.com [172.20.64.37]) by air-xa02.mail.aol.com (v119.7) with ESMTP id MAILINXA21-4746d001332eb; Sat, 25 Aug 2007 06:15:20 -0400
Received: from 64.12.137.249 (toroon12-1177864165.sdsl.bell.ca [70.52.199.229]) by rly-xa01.mx.aol.com (v119.7) with ESMTP id MAILRELAYINXA11-4746d001332eb; Sat, 25 Aug 2007 06:15:17 -0400
Received: from [70.143.209.13] by 64.12.137.249 with SMTP; Sat, 25 Aug 2007 05:09:18 -0600
Message-ID:
From: "AOL SERVICE"
Reply-To: "AOL SERVICE"
To: barrelstoturn@aol.com
Subject: AOL Service
Date: Sat, 25 Aug 2007 05:09:18 -0600
X-Mailer: Microsoft Outlook Express 6.00.2462.0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="D_CAF86CBCFD20_437D"
X-Priority: 3
X-AOL-IP: 70.52.199.229

We found out that your AOL Billing information's records are out of date.
This requires an update of your billing information. Please take a several
minutes from your online experience and update your billing records. You
will not have any problems in future with our online services.
However, your refusal to update your records will be finished in your
account termination.

Please update your records right now.
As you have updated your account records your AOL Sessions will not be interrupted.
Please click the link below to update your billing records:

http://my.aol.com/_cqr/login/?login92374201d098f40fhu=us1

Sincerely,

America Online, Inc.

Okay, any correspondence I get from AOL in regards to me giving up account information has never asked me to click on a link in the email. Not only that there's no logo and nothing that would indicate it is legit. The scammer didn't bother to try and hide the URL destination that well, but just for giggles here were the link really sends you http://my.aol.com.id-39jgr9e83.frgfs.com:8080/aol.com/promocode.htm?84197HNIF4F43NF837NF4378NF3874GBDJKWENRU9132NFEJWOLBW1027GB1ASH0ET5N3JGKREBW73
The other thing my AOL is free I don't have any billing information to give them. Also this is being sent to my AOL account which is within the AOL email system which means only the name AOL SERVICE would show up in the FROM: address not "AOL SERVICE" service@my-aol.com NEXT!


Paypal Scam Email
X-AOL-UID: 3277.432957798
X-AOL-DATE: Tue, 21 Aug 2007 4:42:23 PM Eastern Daylight Time
Return-Path:
Received: from rly-db02.mx.aol.com (rly-db02.mail.aol.com [172.19.130.77]) by air-db02.mail.aol.com (v119.7) with ESMTP id MAILINDB024-aac46cb4e1d1c6; Tue, 21 Aug 2007 16:42:20 -0400
Received: from jocum.org.br (jocum.org.br [204.200.196.47]) by rly-db02.mx.aol.com (v119.7) with ESMTP id MAILRELAYINDB022-aac46cb4e1d1c6; Tue, 21 Aug 2007 16:42:05 -0400
Received: from User ([209.12.93.66])
(authenticated bits=0)
by jocum.org.br (8.13.6.20060614/8.13.6) with ESMTP id l7LB1GU1075946;
Tue, 21 Aug 2007 11:01:17 GMT
Message-Id: <200708211101.l7LB1GU1075946@jocum.org.br>
Reply-To:
From: "service@paypal.com"
Subject: Important Notification
Date: Tue, 21 Aug 2007 06:05:07 -0600
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: undisclosed-recipients:;
X-AOL-IP: 204.200.196.47

Dear PayPal Customer,

This email is to inform you, that we had to block your PayPal Account access because we had to upgrade our servers in order to remove online fraud.

Our terms and conditions you agreed to state that your account must always be under your control or those you designate at all times. We have noticed some unusual activity related to our servers that indicates that other parties may have access and, or control of your informations in your account.

First it was server updates now it's unusual activity on my account, which is it? The least these scammers can do is decide which lame excuse to use.

Please follow this link to confirm your account access information :

https://www.paypal.com/us/cgi-bin/webscr?_cmd=login-run

Please be aware that until we can verify your identity no further access to your account will be allowed and we will have no other liability for your account or any transactions that may have occurred as a result of your failure to upgrade your account as instructed above.

Thank you for your time and consideration in this matter .

Sincerely,
PayPal Account Departement.Yes the whole paypal account departEment is sincerely concerned about my account.



© Copyright 2007, PayPal. All Rights Reserved.
e-mail id : 1211ppl1


No company logo, asking for recipient to click on embedded link which really goes to http://www.sru.ac.th/bud/file/bay/a.htm, the whole email looks nothing like something you would get from paypal. Hell, if you do get a real email from Paypal regarding your account consider yourself part of the privileged from what I understand it's hard to get Paypal to contact you about anything that doesn't involved a auto-canned response.


Until next time be safe.

8/18/07

Poking a stick at a Nigerian Scammer

Okay I know I've posted in the past about different types of scams, mostly because I wanted to possibly warn a few people about them. Well, I am posting again almost on the same subject. See I decided to do something a friend of mine does. Every once in a while he will respond to a scam email just to see what type of nuisance he can become to the scammer. I found it interesting and funny. My friend then encouraged me to do my own version of his workl, so I did. Just for fun I am also showing the "View Source" of the scammers messages. His emails are in italics and my responses are in bold.
X-AOL-UID: 3287.366694132
X-AOL-DATE: Fri, 27 Jul 2007 4:31:30 PM Eastern Daylight Time
Return-Path:
Received: from rly-mc04.mail.aol.com (rly-mc04.mail.aol.com [172.20.118.146]) by air-mc02.mail.aol.com (v118.4) with ESMTP id MAILINMC22-11a46aa5555300; Fri, 27 Jul 2007 16:31:24 -0400
Received: from omail11.walla.co.il (omail11.walla.co.il [192.118.71.131]) by rly-mc04.mail.aol.com (v118.4) with ESMTP id MAILRELAYINMC42-11a46aa5555300; Fri, 27 Jul 2007 16:28:09 -0400
Date: Fri, 27 Jul 2007 23:27:50 +0300
Received: from ([41.205.169.49])
by omail11.walla.co.il ([192.118.71.131]) with HTTP;
Fri, 27 Jul 2007 23:27:50 +0300
From: =?UTF-8?Q?=72=69=63=68=61=72=64=20=73=74=65=76=65=6E=73=6F=6E?=
X-Sender: rich_steve01@walla.com
X-Originating-Email: [rich_steve01@walla.com]
X-Originating-IP: [41.205.169.49]
Subject: =?UTF-8?Q?=48=45=4C=4C=4F=20=46=52=49=45=4E=44=2C?=
Message-Id: <1185568070.604000-30470887-7618@walla.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="------=_EREZ_P_WallaMail_62597_3480_P_0"
X-AOL-IP: 192.118.71.131
X-AOL-SDI: PROFILE
X-Mailer: Unknown (No Version)

HELLO FRIEND,
I AM DR.RICHARD STEVENSON, A SENIOR STAFF WITH THE
CENTRAL BANK OF NIGERIA (CBN).I AM WRITING YOU THIS
LETTER BECAUSECOOL PENNY IS BETTER THAN MILLIONS OF
DOLLARS. IT IS BETTER FOR ONE TO LIVE AND DIE A POOR
HONEST MAN THAN A RICH DISHONEST ONE.I AND THE CHIEF
SECURITY OFFICER (CSO) OF OUR BANK HAVE ARRANGED
WITH AN OFFICER IN COMPUTER SECTION ENGINEER CHUKA
ILOH TO BRING OUT PART OF YOUR TOTAL CONTRACT SUM
AMOUNTING TO FIVEMILLION US DOLLARS.
WHY WE DID THIS,IS BECAUSE ACCORDING TO INFORMATION
GATHERED FROM THE BANKCOMPUTER, YOU HAVE BEEN
WAITING FOR A LONG TIME TO RECEIVE YOUR MONEY
WITHOUT SUCCESS. AS I FOUND OUT THAT YOU HAVE ALMOST
MET ALL THE STATUTORY REQUIREMENTS OF THE CBN IN
RESPECT OF YOUR CONTRACT PAYMENT,YOUR PROBLEM IS
THAT OF INTEREST GROUPS.
A LOT OF PEOPLE ARE INTERESTED IN YOUR PAYMENT AND
THOSE PEOPLEAREMERELY DOING PAPER WORKS WITH YOU AND
THAT EXPLAINS WHY YOU RECEIVE FAXAND PHONE MESSAGES
FROM DIFFERENT PEOPLE EVERYDAY.ALSO WE FOUND OUTTHAT
SOME OF THE OFFICIALS OF THE PARASTATALS HAVE BEEN
EXTORTING A LOT OF MONEY FROM YOU WITH THE PRETEXT
OF HELPING YOU RECEIVE YOUR MONEY,I CAN ASSURE YOU
THAT THIS MAY LAST FOR YEARS YET NOTHING HAPPENS IF
YOU DO NOT DO AWAY WITH THOSE OFFICERS THAT YOU CALL
YOUR PARTNERS.AND FOR SECURITY REASONS DO NOT TELL
ANYBODY THAT YOU HAVE YOUR MONEY UNTIL YOU RECEIVE
CASH AT YOUR DOORSTEP.

THE MONEY IS IN TWO SECURITY-PROOF BOXES WEIGHING
10KG EACH, THAT IS 20KG FOR THE TWO BOXES, YESTERDAY
WE WENT TO FOUR COURIER COMPANIES TOMAKE
ARRANGEMENTS ON HOW TO SHIP THEM BY COURIER TO YOU.
DHL, EMS,FEDEX, ISA ALL SAID THAT THEY MUST OPEN THE
BOXES FOR INSPECTION BY THECUSTOMS BEFORE SHIPMENT.
THIS IS SOMETHING WE WANT TO AVOID BECAUSE THEBOXES
WERE PADDED WITH MACHINE.
WE TOLD THE COURIER COMPANY THAT THE BOXES CONTAINS
PHOTOGRAPHIC AND FILM MATERIALS AND WHEN OPEN WILL
LOOSE ITS EFICACY.WE DID NOT DECLARE MONEY BECAUSE
COURIER DOES NOT CARRYMONEY.TODAY A FRIEND OF MINE
WHO IS A DIPLOMAT DISCLOSED TO ME THAT THERE IS
COURIER COMPANY THEY USE TO SEND DIPLOMATIC
MATERIALS AND INFORMATION FROM ONE COUNTRY TO
ANOTHER,IT HAS DIPLOMATIC IMMUNITY AND CANNOT BE
INSPECTED BY ANY CUSTOMS ANYWHERE IN THE WORLD.THE
NAME OF THE COURIER SERVICE IS UNION DIPLOMATIC
SECURITY COURIER COMPANY (UDSCC).
I WILL MEET WITH THEM AS SOON AS I HAVE YOUR GO
AHEAD ORDER.THE DIPLOMAT WILL HELP ME SO WE DO NOT
HAVE ANY PROBLEM. WE HAVECONCLUDED THAT YOU MUST
COMPENSATE US WITH FIVE HUNDRED THOUSANDUNITED
STATES DOLLARS AS SOON AS YOU RECEIVE YOUR MONEY. TO
THIS EFFECT, YOU WILL SEND US A PROMISSORY NOTE FOR
FIVE HUNDRED THOUSAND UNITED STATES DOLLAR ALONG
WITH YOUR ADDRESS FOR SENDING THE BOXES BY COURIER.
PLEASE MAINTAIN TOPMOST SECRECY AS IT MAY CAUSE A
LOT OF PROBLEMS IF FOUND OUT THAT WE ARE USING THIS
WAY TO HELP YOU,DO NOT EVER TELL ANYBODY ABOUT THIS
UNTIL YOU HAVE YOUR MONEY. I WANT TO HELPYOU BECAUSE
SOMETHING IN ME IS TELLING ME THAT YOU ARE AN
HONESTPERSON.
WHEN YOU CONCLUDE WITH THIS AND YOU SEND OUR
PROMISE, WE WILL HELP TO SHIP PART OF YOUR MONEY TO
YOU.

NB: PLEASE REPLY ME THROUGHMY PRIVATE E-MAIL
ADDRESS:rstevenson200@myway.com

GOD IS WITH US AS WE WAIT FOR YOUR REPLY.
YOURS FAITHFULLY,
DR.RICHARD STEVENSON
Ahhh, I love reading emails that have been squashed through a translator. Has this guy heard of indents? Oh well time to start the game.
-----Original Message-----
From: barrudaki@aol.com
To: rich_steve01@walla.com
Sent: Mon, 30 Jul 2007 3:13 pm
Subject: Re: HELLO FRIEND,
Hello Rich,

I have been waiting to here about this some of money for quite an amount of time.

The courts have been after me for pet support payments for my x-veterinarian. It's quite sad in the separation she got custody of my beloved Tabby Shubert and the courts of forcing me pay 20,000 a month. Now, she is claiming Shubert needs to go to a private Litter Box school and is forcing me back into court to pay for that too!

This money is a god sent for I love my pet and would do anything to ensure he had a problem free life. I am sure you are a pet parent and would agree. I have managed to pay for almost everything but I really need that money promised. My information should be up to date on in your systems and my $500,000 dollar payment has been marked for the past 3 years, please send payment immediately thank you kind sir, with this money Shubert will be able to have a fine education and become a pedigree.

When life hands you lemons, ask for the tequila and salt...


Okay, the guy has to think I am some sort of nut and maybe, just maybe he shouldn't respond.
X-AOL-UID: 3148.456126704
X-AOL-DATE: Tue, 31 Jul 2007 10:29:29 AM Eastern Daylight Time
Return-Path:
Received: from rly-yb02.mx.aol.com (rly-yb02.mail.aol.com [172.18.205.134]) by air-yb03.mail.aol.com (v118.4) with ESMTP id MAILINYB31-17f46af4740b2; Tue, 31 Jul 2007 10:29:29 -0400
Received: from web58915.mail.re1.yahoo.com (web58915.mail.re1.yahoo.com [66.196.100.250]) by rly-yb02.mx.aol.com (v118.4) with ESMTP id MAILRELAYINYB23-17f46af4740b2; Tue, 31 Jul 2007 10:29:20 -0400
Received: (qmail 11179 invoked by uid 60001); 31 Jul 2007 14:29:20 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID;
b=vHWtNm9T0qZItRoZhP+k0xjbfeYvF/eqpXfB00jND+pnSSqk95kdivJtrqLDWr7PJDXnt0bbBXhHSYKCbTfcYaGZbAQbTkWiRN8ro6HMtCC9Wb93E7bnwrkPZKx+LOHih+8PlAGrT1nAafEQPvjV3VEkZMuo8bjHUoQZsmG3eZE=;
X-YMail-OSG: _XU_RGgVM1moVBpWQu_N_izqKqFr68dmUB_KH6BkUK6wm7eCv_f3C6NXyfu79xIiQ_eehpcDUCyGnJbX2IlZ0Ky5SF7zD9GaDljn
Received: from [41.205.172.117] by web58915.mail.re1.yahoo.com via HTTP; Tue, 31 Jul 2007 07:29:19 PDT
Date: Tue, 31 Jul 2007 07:29:19 -0700 (PDT)
From: richard stevenson
Subject: Dear
To: barrudaki@aol.com
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="0-1078368594-1185892159=:11023"
Content-Transfer-Encoding: 8bit
Message-ID: <990379.11023.qm@web58915.mail.re1.yahoo.com>
X-AOL-IP: 66.196.100.250
X-Mailer: Unknown (No Version)

--0-1078368594-1185892159=:11023
Content-Type: multipart/alternative; boundary="0-409282579-1185892159=:11023"


--0-409282579-1185892159=:11023
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

Dear

I received your email and the contents understood.Firstly,my name is Richard Stevenson,Chief security Officer in the central bank of Nigeria,(C.B.N.)Iam 56 years old,and having 5 kids - 3 girls and two boys. I am a full christian, I attend 'Mountain of Fire and Miracles Ministries' (M.F.M) I have been making arrangement on how you will receive the money on your doorstep as I promised, the money is in two security-proof boxes weighing 10kg each that is 20kgfor the two. I will be concluding with the Courier Company by tomorrow or next after which I will inform you with all the modalities on how to proceed.

I want to let you know that i did not just wake up one morning and decided to contact you.After having thought of who to do this business with, i was faced with confusion on how to choose the right and honest one.But i consulted my Prophet in our Church and he directed me to embark upon a seven-day praying and fasting exercise,which i did.Then on the last day of my fasting,the LORD reveaeled to me a certain web-page where i got access to your email contact and Name.So this business is of divine origin from the Almighty God.

Bear in mind that this has been a way by which all the top officials have been moving money out of the country without the knowledge of any body. Please do not worry yourself too much everything is under control all I need is your cooperation so that we can
achieve this.

Meanwhile, you can still call me on my direct no 234-805 392 6492 if you have any question or any other thing you may ask before my final arrangement with the courier company. You should send down your private tel.no and your house address where you wish the consignment should be delivered.

The other of my mail contains the Promissory Note you have to re-type and sign,if possible promising me as soon as you receive this money,you are going to give to me the percentage discussed.

Waiting to hear from you soonest,for you to tell me the preferable mode through which you want to recieve the fund.
Thanks,

Richard Stevenson
234-805 392 6492

N/B: ATTACHED HERE IS MY WORK I.D FOR YOU TO KNOW WHO
YOU ARE DEALING WITH.PLEASE DO NOT EXPOSE AND THIS BUSINESS SHOULD BE KEPT STRICTLY CONFIDENTIAL(FROM WHOSOEVER) BECAUSE OF
MY SAFETY IN OFFICE AND THAT OF THE BUSINESS IN
QUESTION.



Wow, a photo, I'm impressed. I wonder what dead body he looted that off of. So our scammer has let his greed get the better of him and even decided to reveal some personal information about himself. Great looks like I will need to give some personal information too.
-----Original Message-----
From: barrudaki@aol.com
To: r.stevenson200@yahoo.com
Sent: Fri, 3 Aug 2007 9:25 am
Subject: Re: Dear

Hello Richard,

What a cawinkadink I am part Christian, part pagan with lettuce, tomato, and bacon on the side. You may have heard of my church ‘Mound of Fire Ants and Debacles Miniseries’ we are on Wednesday nights at 9 PM on the Sci-Fi Channel.

Funny you should mention my web page; it was shut down by the US Government last week, something about leaking classified information about aliens and not blacking out the Lee Harvey Oswald files. But, luckily you got to see it before it was shut down and my apartment raided. I’m using a McGuyvered computer put together with chicken wire, twine, and duck tape because my regular one was confiscated. But that’s
in the past my friend!

You will have my full co-operation unless of course it entails driving, I no longer have a car and the pet support payments leave me with no money to call a cab. I would love to call you however; in the separation agreement my x-veterinarian was awarded ownership of the phone and the number. I am currently on the do not call waiting list
until I can prove I won’t call anyone to complain about how my pet parent rights have been trampled on. After that I go on a 6 year waiting period and hope that some other poor sap loses their right to a phone in which I will be granted a new number and 3 years after that I’ll be eligible to buy a new phone. The US Government has gotten real strict with phone usage sighting The Patriot Act and unpaid long distance calls to The Prime Minister of Mars.

Luckily, I did retain an address after the separation. You can send the information via mail to:

Idant Exist III
1478 Lakeaskew pl
big tuntunton, ZE 0u812

I don’t really live there but I’ve been pilfering mail from that mailbox and no one has noticed yet, so it should be safe. Hope to hear from you soon.

When life hands you lemons, ask for the tequila and salt...


Okay, you would think the guy would have caught on by now or should maybe rethink corresponding with me anymore. But no......
-----Original Message-----
From: richard stevenson
To: barrudaki@aol.com
Sent: Fri, 3 Aug 2007 12:59 pm
Subject: Dear, / Fill the note and send the info needed

Dear,

You are requested to fill in the promissory note i forwarded to you,that will assure me that as soon as the fund gets to you via the Courier Service,you are going to use my own percentage according to my instructions.

On next response,enclose with your full name,delivery address and tel. no so i can use it to pay the courier company on your behalf as the 'Receiver' of the consignment.

Waiting for the information and the completed Note.

Sincerely,
Richard.

No attachments came with the email, nice to know even the scammers can forget to send attachments.
-----Original Message-----
From: barrudaki@aol.com
To: r.stevenson200@yahoo.com
Sent: Fri, 3 Aug 2007 2:36 pm
Subject: Re: Dear, / Fill the note and send the info needed

Hello Richard,

There does not seem to be an attachment to any of your emails thus far. Shall I tell you how much money I saved by switching to Geico?

When life hands you lemons, ask for the tequila and salt...

Okay, I couldn't resist shaking his tree again...just wanted to him to know I was still around to scam...

-----Original Message-----
From: barrudaki@aol.com
To: r.stevenson200@yahoo.com
Sent: Tue, 7 Aug 2007 2:09 pm
Subject: Re: Dear, / Fill the note and send the info needed

Richard,

I still have not heard back from you regarding the paper work, you were suppose to send to me. I have a feeling you are trying to keep the money for yourself. This is very unkind of you to do, Shubert needs new fur on his paws and that money is needed badly.

If I don't hear from you soon I will have no choice but to give your contact information to my x-veterinarian and have her harass you like she does me.

When life hands you lemons, ask for the tequila and salt...

-----Original Message-----
From: richard stevenson
To: barrudaki@aol.com
Sent: Wed, 8 Aug 2007 10:07 pm
Subject: Dear, / Fill the note and send the info needed

I MR/MRS/MS, ............., do hereby agree to pay
the sum of US $500,000.00 (Five hundred thousand
dollars US) to Dr. Richard Stevenson of Nigeria for
services rendered. This payment will be forwarded
within 14 days of receipt of the partial payment owed
on a contract. This partial payment in the amount of
$5,000,000.00 will constitute a debt to Dr. Richard
for his services to be paid within the specified 14
days upon verification of the funds enclosed in the
shipment.Dated, this day,9th August 2007.
Therespective shipment must be received within 14 days of this date.
If shipment is not received within 14 days this note
expires as unfulfilled.

MR/MRS/MS ...................

__________________________________________________

Dear,

You are requested to fill in the promissory note
i forwarded to
you(as above),that will assure me that as soon as the fund gets to you via the
Courier Service,you are going to use my own percentage according to my
instructions.

On next response,enclose your full name,delivery address and tel.
no so i can use it to pay the courier company for the airlifting on your behalf as the
'Receiver' of the consignment.

The promissory note you have not filled is the only thing holding us to commence progress in delivering this consignment to you via the Courier Service.

Waiting for the information and the completed Note.

Sincerely,
Richard.


You know I thought for sure this guy would have gotten somewhat of a hint that I maybe yankin' his chain a bit. I mean really pet support payments, my cat needing new fur on his paws, or needing to go to a private litterbox school to become a pedigree? My guess he didn't read the emails.Let's see if he notices the differences I made to his precious agreement.


-----Original Message-----
From: barrudaki@aol.com
To: r.stevenson200@yahoo.com
Sent: Tue, 14 Aug 2007 6:40 pm
Subject: Re: Dear, / Fill the note and send the info needed


When life hands you lemons, ask for the tequila and salt...
-----Original Message-----

From: richard stevenson

To: barrudaki@aol.com

Sent: Wed, 8 Aug 2007 10:07 pm

Subject: Dear, / Fill the note and send the info needed

I MR/MRS/MS, Idant Exist., do hereby agree that I've already paid
the sum of US $500,000.00 (Five hundred thousand
dollars US) to Dr. Richard Stevenson of Nigeria for
services rendered. This payment has been forwarded
within 14 days of receipt of the partial payment owed
on a contract. This partial payment in the amount of
$5,000,000.00 will constitute a debt already paid to Dr. Richard
for his services within the specified 14
days upon verification of the funds enclosed in the
shipment.Dated, this day,9th August 2007.
Therespective shipment must be received within 14 days of this date.
If shipment is not received within 14 days this note
expires as unfulfilled.
MR/MRS/MS .Idant Exist..................


__________________________________________________

I already told you I don't have a telephone, I already explained my
x-veterinarian got the phone and the number in our seperation. I am on
the Do not call waiting list. My full name you already know

Idant Exist
1478 Lakeaskew pl
big tuntunton, ZE 0u812

-----Original Message-----
From: richard stevenson
To: barrudaki@aol.com
Sent: Wed, 15 Aug 2007 10:31 pm
Subject: CORRECTION PLS


PLEASE FILL THE NOTE AS IT IS,BECAUSE YOU HAVE NOT PAID ANYTHING YET UNTILL YOU RECEIVE THE PRINCIPLE AMOUNT OF 5 MIL.DOL COMING TO YOU IN THE CONMSIGNMENT. SO FILL IT AS IT IS BELOW:

I MR/MRS/MS, ............., do hereby agree to pay
the sum of US $500,000.00 (Five hundred thousand
dollars US) to Dr. Richard Stevenson of Nigeria for
services rendered. This payment will be forwarded
within 14 days of receipt of the partial payment owed
on a contract. This partial payment in the amount of
$5,000,000.00 will constitute a debt to Dr. Richard
for his services to be paid within the specified 14
days upon verification of the funds enclosed in the
shipment.Dated, this day, 31st July, 2007.
Therespective shipment must be received within 14 days of this date.
If shipment is not received within 14 days this note
expires as unfulfilled.


Wow, he actually read that email, but of course he would it pertains to him getting my money. Plus he replied in all caps, boy he must be getting MAD at me. I guess I should play it straight with him from now on.....Nah.


-----Original Message-----
From: barrudaki@aol.com
To: r.stevenson200@yahoo.com
Sent: Sat, 18 Aug 2007 3:51 pm
Subject: Re: CORRECTION PLS

Mr. Stevenson,

Did you not read my response to your first email. I think you may need
to read it again. Maybe you need to read it slower the next time
around. I already paid. I have been waiting for you to get in to
contact with me. I think I shall need to pass this information now,
since you have stolen $500,000 from me and now refuse to send the
package. You leave me no choice. I've corresponded with you enough now
I will contact an expert who can decipher your IP address and track
down where you live. Once I have that information I will pay you a
visit.

When life hands you lemons, ask for the tequila and salt...

Let's see how he responds to that one. My guess he is going to try and head off a misunderstanding and re-establish himself as someone who is a God fearing Christian and would never try to scam me and I must have him confused with someone else. Stay tuned I'm sure there will be an update.

8/17/07

Would you cancel your credit card if they gave out information about your account without your consent?

Okay before I go into this I need to give some back ground detail on this. I had missed ONE payment on my card. Totally my fault no excuse, the bill got pushed aside among the whirl wind activities surrounding my life right now. So of course the interest rate gets jacked and I get a late fee. From a business point of view I understand, I knew when I signed the contract there were penalties for missing a payment. I decide it would be cheaper for me to pay off the card with a low interest line of credit so I pay the card off. Should be the end of the story, right? Wrong!


The card was paid off last Thursday. I go to my bank today, which I also use to work at. I get to the teller, and I am informed my credit card company called them looking for me. When the credit card representative was informed I no longer worked there they got rude said a few snide remarks and then demanded they be given any information my former employer had on me. The teller who answered the phone in the first place was honest and said she didn't have any new information on me. The credit card representative then claimed to the teller that I was 3 months late on payment and again demanded information on me. The teller again explained she had none.

This type of practice is unethical and against privacy laws. I only missed ONE payment yet MY CREDIT CARD COMPANY FALSELY ACCUSSED ME OF NOT PAYING MY BILL FOR 3 MONTHS AND THEY MADE THIS ACCUSATION TO SOMEONE WHO HAS NO INVOLVEMENT WITH ME OR MY FINANCES.

I can guess the credit card representative made this false claim in an attempt to make it seem like I wasn’t paying my bills and hoped they got a hold of a gossiper that would spread it around my former work place that I was a deadbeat. It is also possible the representative wanted to put me in bad light in an attempt to get the person to give up any information they may had on me.

I missed ONE freakin' payment and they turn into a witch hunt! The freakin' account was paid off by the time this call to my former employer was made, there was absolutely no reason for this!

I'm sending this out as a warning to anyone who is thinking of getting a credit card from a certain credit card company whose name starts with “A” and is offering a certain Blue card.

I paid off my account and this is how they pay me back! I guess since I'm not a big business customer it doesn't matter to them who they give my information to or if it's accurate, it's obvious they have no respect for their card holders. In my case due to my own decision, former card holder.