Blog

  • SCAM Western Union Certified Request: Please Verify Application Enclosed

    This email claims that the user needs to verify a Western Union Netsend card.  The email contains the following information:

    Certified Request: Please Verify Application Enclosed <link to a site that is NOT western union>

    western union netspend scam
    western union netspend scam

     

    According to VirusTotal there are not malware links in the email:

    URL Scanner Result
    Websense ThreatSeeker Suspicious site
    ADMINUSLabs Clean site
  • SCAM United States Marine Corps. SYRIA

    This is a typical con artist email attempt.  DO NOT send these people your personal information.

    Subject: United States Marine Corps. SYRIA

    from: Capt.David Michael <USMC@colombo.pr.gov.br>

    Dear Associate,

    How are you doing my friend, great I guess! Now I know this mail will definitely come to you as a huge surprise, but please kindly take your time to go through it carefully as the decision you make will probably go a long way to determine my future and continued existence. First, let me introduce myself. I am Capt. David Michael, assigned to 2nd Battalion, 3rd Marine Regiment, 3rd Marine Division, 3rd Marine Expeditionary Force in Syria. I am desperately in need of assistance and I have summoned up courage to contact you. I am presently in Syria and I found your contact particulars in an address journal. I am seeking your assistance to evacuate the sum of $10,570,000 (Ten million Five Hundred and Seventy Thousand USD) to the States or any safe country; as far as I can be assured that it will be safe in your care until I complete my service here. This is no stolen money and there are no dangers involved.

    SOURCE OF MONEY: Some money in various currencies was discovered and concealed in barrels with piles of weapons and ammunition at a location near one of President Assad’s old Presidential Palaces during a rescue operation and it was agreed by all party present that the money be shared amongst us. This might appear as an illegal thing to do but I tell you what? No compensation can make up for the risks we have taken with our lives in this hellhole. The above figure was given to me as my share and to conceal this kind of money became a problem for me, so with the help of a German contact working with the UN here (his office enjoys some immunity) I was able to get the package out to a safe location entirely out of trouble spot. He does not know the real contents of the package as he believes that it belongs to an American who died in an air raid, before giving up trusted me to hand over the package to his close relative. I have now found a secured way of getting the package out!
    of Syria for you to pick up.

    I do not know for how long I will remain here, as I have been lucky to survive two suicide bomb attacks by Pure Divine intervention. This and other reasons put into consideration have prompted me to reach out for help. If it might be of interest to you then Endeavor to contact me and we would work out the necessary formalities but I pray that you are discreet about this mutually benefiting relationship.

    For more details please contact me via my private box: capt.davidmichael02@y7mail.com

    Respectfully,
    Capt.David Michael
    United States Marine Corps. SYRIA

  • Scam Attn: Your $100 AMAZ0N-Prime Credit-Will be Expiring

    DO NOT give your information or clicked links in this email:

    AMAZ0N .com Prime.
    IMPORTANT NOTIFICATION: REGARDING YOUR CURRENT REWARDS POINTS

    AMAZ0N-PRIME SHOPPER ID#13144 – – DATE: 1/16/16

    ONE (-1-) DAY ONLY!

    To show you how much we really value your years of repeat business, and to celebrate the success of AMAZ0N Prime we’ve just awarded you with $100 worth of bonus points that can be applied towards any product for sale on AMAZ0N’s website!

    To claim your new bonus, just follow the link that we’ve provided below and use your coupon-card during checkout on AMAZ0N’s website…..That’s it!

    Go here now to redeem your new reward
    ******The Link Provided Above Expires on: 1/16/2016, So Don’t Wait!
  • DEPT. OF HOMELAND SECURITY SEEKING TO WIRE-TAP THE INTERNET (scam email)

    This email is a request for money and tries to scare you into giving money.

    OFFICE OF HOMELAND SECURITY
    Immigration and Customs Enforcement
    U.S. Department of Homeland Security,
    Street S.W. Suite 322.Atlanta Georgia 30303
    2160 Park-lake Drive Northeast, Atlanta – 1694 Phoenix Parkway, Atlanta
    UNITED STATES OF AMERICA Atlanta Area. Metropolitan Atlanta Rapid Transit
    Authority ( MARTA) The MOTTO of ICE is “INTEGRITY, COURAGE, and EXCELLENCE”
    Email: ( homelandsecdpt01@mail.ru )

    UNITED STATES DEPT. OF HOMELAND SECURITY SEEKING TO WIRE-TAP THE INTERNET.
    GOOD DAY,

    DIPLOMATIC IMMUNITY SEAL OF TRANSFER FOR FINAL FUND RELEASE.

    We received your email and you must take note that this is for real because we are ready
    to take you to any length if you failed to proof the legitimate of the fund you are
    about to receive, As a Federal Commission we are here to protect your interest and the
    interest of all the United State citizens as well as this great Nation, You have been
    investigated as the beneficiary of the said funds that is why you are in touch with the
    FBI for a solid proof before the funds will be release to you.

    The said funds is now in U.S Bank in your name which has been placed on hold under the
    custody of the FBI for further verification and proof before releasing the fund to you,
    we further held a meeting with the United nation in person of the President Muhammadu
    Buhari, where they finally concluded that
    every of our American citizen should stop every upfront payment because your so called
    partner will keep asking more money after money, and fund will not be released to you.

    They finally concluded that every American citizen must posses a Vital Classified
    Document called Diplomatic Immunity Seal of Transfer that overrule every upfront payment
    fee and certificates,You do not have this document in your files, if you did the fund
    would not have been put on-hold, We did not believe this at first, but when we saw the
    transfer we had no option than to contact you.
    We have gone through your Identification record and also the information received from
    you, we have verified a lot of things about you.

    It has come to the attention of our Money Trafficking investigation department, that you
    have some funds valued at U.S in USA dollars to your name, The said payment is awaiting
    adjudication and crediting to you, this funds are from Inheritance ‘willed ‘ from C.B.N
    Bank Nigeria precisely.

    With full concern of The F.B.I and the Internal Revenue Service (IRS) wish to remind you
    of the consequences of remitting such huge sums of money without complying fully with
    the provisions of the Financial and Allied Matters Decree 5 as amended in sub-section C
    (6) of 2010, which stipulates
    that any monitory transaction been done in the United States Of America, must have
    proper records, which duly guarantees and covers the transaction as legitimate and
    legally acquired and not criminally or terrorist associated funds. This is due to
    ongoing terrorist activities/economic crimes on and against the United States of America
    citizens.

    Note that with the information’s we have here, the fund in your name here was release
    from Federal Republic Of Nigeria, To this regard you are to contact the EFCC Nigeria
    where the fund was release from so that they will issue you the required document
    because they are the only people that can issue you the document. Nobody else have the
    right or privilege to issue you this document unless the EFCC Nigeria.

    You are under an observational /Investigation in connection with money laundering. If
    your funds comes from a legitimate and legal source, the proper guidelines for you to
    recover the right of transaction is for you to provide the official monitory transaction
    release document so that your funds will be legally processed and recorded and accounted
    for and then finally released to you.

    FEDERAL BUREAU OF INVESTIGATION (ANTI-TERRORIST AND MONEY LAUNDERING DEPARTMENT) IS HERE
    to wipe out terrorism, and will stop at no length in doing our duty for the American people.

    You have 92 hours to produce legal proof of the below frozen wired transaction number
    code: AZQV9007 owned by you. Note that you do not have any rights to receive these funds
    if the documented legal wire information is not completed.

    For your own good and benefit, you are advice not to send your money to anybody except
    the below person that will get the document for you, It has come to our notice that you
    have been dealing with some set of Impostors regarding the present transaction in your
    name, with the power imposed on us as a high Federal Commission, you are hereby warn and
    instruction to terminate your involvement with any people or individual contacting you
    regarding this present transaction.

    The said funds is now in our custody in your name as the beneficiary, your dealings
    should be channel to this office alone, if we find out you are still communicating with
    Impostor’s you will be charge for advance fraud communication by the Federal Law.

    The very heart of FBI operations lies in our investigations which serve as our mission
    states, to protect and defend the United States against terrorist and foreign
    intelligence threats and to enforce the criminal laws of the United States,So follow our
    instructions properly to avoid any action before you. pay any fee to them, they will ask
    for more We currently have jurisdiction over violations of more than 200 categories of
    federal law.

    So you can see that we can track you down through Investigative programs, We have your
    address and the evidence and status of your wired funds, so we can arrest you any time
    anywhere, so contact them with required fee and the mtcn in receipt of this message,
    because the document is very mandatory.
    You don’t have the required document on your possession, these document are only to be
    issue to you from the paying country NIGERIA, to this regards you are advice to contact
    the EFCC NIGERIA to obtain the document from them to enable the immediate release of the
    funds in your name without entertaining any interrogation and avoid any further delay.

    We have done our verification on your FBI Identification Record with your Social
    Security Number, the only document left is the required Diplomatic Immunity Seal of
    Transfer (DIST) Which should be issue to you from the paying country of the said funds,
    you are to contact the ECONOMIC AND FINANCIAL CRIME COMMISSION (EFCC) Nigeria to obtain
    the above required document, find below their contact information’s:

    Contact Person: Mr IBRAHIM LAMORDE
    Email: ( efccfile01@list.ru )
    Tel: +234-80-8459-1264

    Furthermore, be advice that according to the United State Law together with the FBI
    rules and regulations, you are to obtain the document from the EFCC NIGERIA where the
    fund was transfer from, Also Note that you are to take care of the Document to be issued
    to you right away, because due to the content of the document and how important the
    secured document is, You are advised to take care of the document by requesting for the
    payment information and sending the fee to the EFCC NIGERIA the sum of $150 Dollars only
    for the issuing of the document right away and your fund will be release to you, That is
    the only way the EFCC NIGERIA will issue you the document, because they are going to
    issue you the Authentic and Original copy of the document for the release of your fund.

    You are here by advice to Contact them through the email address above to acquire from
    them on how you are going to send the fee to them. Note that you are to do this
    immediately if you really want your fund to be credited to your personal account and
    also if you don’t want any action to be fall before you, We have already informed the
    EFCC NIGERIA about the present situation, so go ahead and contact them immediately.

    Your fund is now on our custody and will not be release to you unless the required
    document is confirmed, After that the fund will be release to you immediately without
    any delay.
    NOTE: We have asked for the above documents to make available the most complete and
    up-to date records possible for no criminal justice purposes.

    WARNING: Failure to produce the above requirement in the next 96 hours, legal action
    will be taken immediately by proper authority and may be disastrous to anyone who fail
    to have the said document,while
    transfer,justification and if found guilty, you will be jailed As terrorism, drug
    trafficking and money laundering is a serious problem in our community today.

    The F.B.I will not stop at any length in tracking down and prosecuting any criminal who
    indulges in this criminal act.

    CC: Canadian Police Association
    CC: GENERAL INTELLIGENCE DEPARTMENT (GID)
    CC: Asia Pacific Group on Money Laundering (APG)
    CC: Egmont Group
    CC: FEDERAL BURUEA OF INVESTIGATION(FBI USA)
    CC: European Bank for Reconstruction and Development (EBRD)
    CC: Financial Action Task Force (FATF)
    CC: International Monetary Fund (IMF)
    CC: International Organization of Securities Commissions (IOSCO)
    CC: International Banking Security Association (IBSA)
    CC: International Air Transport Association (IATA)
    CC: Institute de Formation Interbancaire (INSIG)
    CC: World Customs Organization (WCO)
    CC: Inter-American Development Bank (IADB)
    CC: Offshore Group of Banking Supervisors (OGBS)
    CC: WORLD CENTRAL BANK (SW)
    CC: NIGERIA POLICE FORCE (NPF)
    CC: NORTH YORKSHIRE POLICE (UK)
    CC: ECONOMIC FINANCIAL CRIME COMMISSION (EFCC)

    FORWARD THE DOCUMENT TO US VIA EMAIL ATTACHMENT AS SOON AS YOU OBTAIN IT AFTER WHICH YOU
    MUST HAVE EFFECTED THE PAYMENT SUM OF $150 TO THE BELOW INFORMATION WHILE YOU PROVIDE
    THE MTCN TO MR IBRAHIM LAMORDE WITH THE ABOVE EFCC EMAIL OFFICE ADDRESS FOR YOUR
    IMMEDIATE (DIST) DOCUMENT TO BE AVAILABLE.

    Receiver’s Name: BEN KOJO
    Sender’s Name and Address.
    TextQuestion: IN GOD
    Text Answer: WE TRUST
    Amount:$150 USD.
    Destination:Abuja-Nigeria.

    N:B:YOU NEED NOT TO CONTACT HER AT ALL IF YOU CANNOT AFFORD THE FEE, THEN YOU WILL FALL
    TO THE CATEGORIES OF THOSE THAT THERE FUND WILL BE RETURN BACK TO THE CBN TREASURY
    OFFICE IN NIGERIA WHERE THE CONTRACT IS BEEN EXECUTED.

    Only re-confirm to her the following information below when you are effecting the
    payment of $150 while you follow instructions by using the above payment information
    given to you and Get back to this office as soon as you have done that for
    clarification, failure to adhere strictly with this instruction will definitely lead to
    lost because as a result of payment cancellation.

    1.BENEFICIARY NAME AND ADDRESS.
    2.BENEFICIARY TELEPHONE NUMBER.
    3.BENEFICIARY AGE/OCCUPATION.
    4.BENEFICIARY MARITAL STATUS

    The above information will be acknowledge by the serious ones effecting the payment
    above mentioned fee being payment for the issuance of the said documents keeping your
    fund on-hold here in the United State,then We will not hesitate to do the needful as
    soon as we confirm your payment for the issuance of the (DIST) document and Your on-hold
    fund will be released immediately here in the United State.

    Best Regards.
    Keith B. Bolcar
    Email: ( homelandsecdpt01@mail.ru )
    Deputy Secretary. (Homeland Security.)
    United States Department of Homeland Security.
    HARTS FIELD-JACKSON ATLANTA CBP DEPT. HOMELAND SECURITY
    Tel#:(213)537-2170
    Home
    Counter-terrorism
    Aviation Security
    Cyber security
    Chemical
    Security
    Law Enforcement
    Protecting, Analyzing & Sharing Information Protecting Infrastructure
    Protect Against Fraud & Counterfeiting Secure Identification Laws &
    Regulations Publications Committees & Working Groups Grants Report
    Incidents Border Security Protecting America Facilitating Travel & Trade
    Laws & Regulations Grants Publications Preparedness, Response, Recovery
    Preparing Your Family Preparedness Disaster Response Disaster Recovery
    Communications Committees & Working Groups Laws & Regulations Grants
    Training & Technical Assistance Publications Local Resources Immigration
    Moving to the United States Immigration Enforcement Visiting the U.S.A.
    Committees & Working Groups Laws & Regulations Benefits

  • Notice:Walgreens Points for elamb.security are expiring soon scam

    Notice:Walgreens Points for YOUR EMAIL are expiring soon scam

    Your Walgreens-Points are expiring. You have accumulated $50 in Walgreens Rewards. You must claim by January 31, 2016.

    Your Redemption Code: #R561875

     

    virusTotal detects possible malware:

    URL Scanner Result
    BitDefender Phishing site
    ADMINUSLabs Clean site
  • SCAM – USA INTERNATIONAL LOTTERY

    Here is a classic scam.  There are so many of these Internet Lottery scams:

    We happily announce to you the draw of the USA INTERNATIONAL LOTTERY, online Sweepstakes promotion held in United States of America on Saturday 16th Jan. 2016. You have been allocated to claim a total sum of £520,731.00 (Five Hundred and Twenty Thousand, Seven Hundred and Thirty One British Pounds) with ticket number: B55607545 4152 with reference number USA/JA2C110P5 and Serial number ZA5365/3 ,Batch number XA87-2PY,drew the lucky numbers: 06 14 32 35 41 Bonus 43. Contact our Fiduciary agents immediately to commence release of your lottery prize by providing details as listed below. 1. Full Name: 2. Email Address: 3. Age/Occupation: 4. Reference Number/Ticket Number 5. Phone Number: 6. Country: 7. Date of draw To file for your claim, please contact our fiduciary agent and provide them with your winning email and details as above. USA Lottery Fiduciary Agents: Mr. Phil Langa Foreign Service Manager E-mail: phil.langa@aol.com Yours faithfully, Teresa Marie Roberts. Online coordinator USA INTERNATIONAL LOTTERY

  • SCAM Strickly for you

    This scam is sent from

    Mr. Mike <q20@fasticmails.com>

    Dear Beneficiary

    I am Mike Johnson Director Inspection Unit United Nations  Inspection Agent in JFK Airport New York. We are rounding up for the last Quater of the auditing, all abandom Consignment in US Airports are being transfer to our facilities here for inspection and confiscation. During our investigation, I discovered An abandoned shipment on your name which was transferred to our facility here in New York and when scanned it revealed an undisclosed sum of money in a Metal Trunk Box. The consignment was abandoned because the Content was not properly declared by the consignee as money, rather it was declared as  personal effect to avoid diversion by the Diplomatic Agent also the Diplomat inability to pay for Non Inspection Fees.

    On my assumption, the boxes will contain more that $6M and the consignment is still left in storage house till today through a Courier Dispatch Service. The Consignment is a metal box with weight of about 242LBS (Internal dimension:  W61 x H156 x D73 (cm). Effective capacity: 680 L.)Approximately.

    The details of the consignment including your name the official document from United Nation office in London are tagged on the Metal Trunk box.

    I want to use my good office and clear the Consignment and deliver it to you. If you want us to transact the delivery for mutual benefit, you should provide your name, Phone Number and full address, to cross check if it corresponds with the address on the official document including the name of nearest Airport around you and other details. You should send the required details to me for onward delivery.

    All communication must be held extremely confidential. I can get everything concluded within 24 to 48 hours upon your acceptance and proceed to your address for delivery. But it must be on the condition that you will give me 30% of the amount contained in the boxes and i must get assurance from you concerning my 30% before i will proceed.

    I want us to transact this business and share the money, since the shipper have abandoned it and ran away. I will pay for the Non inspection fee and arrange for the boxes to be moved out of this Airport to your address, Once i am through, i will deploy the services of a secured shipping Company to provide the security it needs to your doorstep. or i can bring it by myself to avoid any more trouble. But i will share it 70% to you and 30% to me. But you have to assure me of my 30%. do respond to me if you are interested to conclude this with me.

    Please strictly reply to my private email; dipdipmikejohnson@gmail.com

    Looking forward to hear from you

    Best Regards,
    Mike Johnson
    INSPECTION OFFICER

  • Scam Attn: Your $100 Macys Store Credit MUST be Redeemed

    This false Macy’s email contains a link to a website with possible malware:

    Macy’s Store Rewards
    ATTN: Your Email

    You Currently Still Have $100 in Macy’s Bonus Points That MUST be Redeemed by 6/16/2016.

    If not claimed, this balance will be lost. (Credit can be used online or in store)

    Reward Credit #2371

    *Go Here Now to Redeem Your $100 Credit* bad link

    **Expiration: 6/16/16

  • SCAM Notice:Walgreens Points for YOU are expiring soon

    This email may be a link to a phishing site.  DO NOT click the link:

    Your Walgreens-Points are expiring. You have accumulated $50 in Walgreens Rewards. You must claim by January 31, 2016.

    Your Redemption Code: #R561875

    Use Your Points LINK REMOVED

  • Scam – Attn: Your CVS ExtraCare Card Has Been Updated – Must Confirm

    This email contains a link to a possible malware site:

     

    CVS Extra Care Rewards Program
    DATE: 1/12/16

    IMPORTANT MESSAGE FOR CVS CARD HOLDER: YOUR EMAIL

    Your CVS Extra Care Savings & Rewards Card Has Been Updated.

    To be sure you keep all of your points that you’ve accumulated over the years shopping at CVS (both market and pharmacy), you must visit the link below to start using your new rewards.

    Link REMOVED – Goes to possible malware site
    **Reward #3833 will expire on 1/16/16. Don’t Forget!

    VirusTotal:

    URL Scanner Result
    Sucuri SiteCheck Malicious site
    ParetoLogic Malware site