You're not my Pal....

Kinda like I mentioned below ~ look what I found in the trash today. I'm putting a copy here, forwarding it to spoof@paypal.com and then ~ *poof!* ~ it's history.

Notification of Limited Account Access RXI091‏
From: PayPal (service@paypal.ca)
Sent: December 30, 2009

Dear Paypal member:

We were unable to process your most recent payment. Did you recently change your bank, phone number or credit card?.

To ensure that your service is not interrupted, please update your billing information today.
Click on the link below .

(link deleted

Or contact Paypal Member Services Team. We're available 24 hours a day, 7 days a week.
If you have recently updated your billing information, please disregard this message as we are processing the changes you have made.

* Originator Identification Number: 679848
* Reference Number: 47WJ2222U6JR4

Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click the Help link in the top right corner of any PayPal page.

To receive email notifications in plain text instead of HTML, update your preferences.

Header Analysis

The following IP addresses were extracted from your headers:

IP Address Probable Country
211.166.10.142 China (Beijing)
82.91.176.138 Italy (Rome)
* The last IP listed is usually the originating IP address

Oh yeah, the response from PayPal security is:


RE: FW: Notification of Limited Account Access RXI091 (KMM4868863I15977L0KM)‏
From: spoof@paypal.com (spoof@paypal.com)
Sent: December 30, 2009

Hello W

Thanks for forwarding that suspicious-looking email. You're right - it
was a phishing attempt, and we're working on stopping the fraud. By
reporting the problem, you've made a difference!

Identity thieves try to trick you into revealing your password or other
personal information through phishing emails and fake websites. To learn
more about online safety, click "Security Center" on any PayPal webpage.

Every email counts. When you forward suspicious-looking emails to
spoof@paypal.com, you help keep yourself and others safe from identity
theft.

Your account security is very important to us, so we appreciate your
extra effort.

Thanks,

PayPal

Don't bank on it....

I'm tired ~ I have a cold and I'm going back to bed. Be smart ~ if you get *any* kinda mail like this from your bank, Paypal, EBay, whatever...., do not click on the link. If you think you should confirm the veracity of such an email, go directly to the real website and check into it. (Oh yeah: PS ~ I don't have an account with Scotiabank.)


Resolution Center: Your account ScotiaBank Online is limited.‏
From: Security ScotiaBank Online Services@ScotiaBank.com

Sent: December 28, 2009 8:55:58 AM
To:

Security & Resolution Center

This email was sent automatically by Scotia Bank in response to our Fraud Department request to update your profile. This is done for your protection; only you, the recipient of this email can take the next step .

To update your profile and access your account, follow these steps:

1. Click on the link below.

https://www.scotiaonline.scotiabank.com/online/******start.jsp?language=

The link will take you to our Profile Update page.

2. Fill in the appropriate fields to update your profile and click Submit. You will then be able to have access to your account and using your Scotia Bank account.

Thank you,
Scotia Bank

That diplomatic touch...

Very Urgent...‏

From:

U.S.Customs and Border Protection (info@thomasswinkowski.us)

Sent: December 30, 2009 2:13:03 AM
To: info@thomasswinkowski.us

We hereby bring to your notice that a consignment to be delivered at your residence
by a diplomat had been stopped by us. This is a security measure put in place by
United States of America to check terrorism and money laundry through the sale of
illegal drugs locally and internationally.

After examination, we found out that the consignment contained the sum of US$7.7
Million, which upon further investigation revealed that the fund was your inheritance.

Consequently, the diplomat will deliver your consignment at your residence after all
protocols have been observed.

However, in order to proceed we need you to reconfirm the following information,

Full Name:
Residential Address:
Date of Birth:
Occupation:
Telephone/Mobile Numbers:

It is imperative that we inform you to provide the airway bill of your consignment
and a means of identification,(either your international passport or driving license).

In order to see that your consignment is processed within a shortest time it is
advise you reply via my private email box... thomas.s.winkowski.cbp@mcom.com

We await your response.

Regards,

Thomas S. Winkowski
Assistant Commissioner,Office of Field Operations
U.S.Customs and Border Protection

Baby, you can drive my car...

Yup ~ I certainly would rush off in all directions to claim a prize from Toyota using an AOL account for a response.


**********

PRIZE.......AWARD‏
From: TOYOTA INTERNATIONAL GMAING BOARD (info@toyota.co.uk)
Sent: December 27, 2009

TOYOTA LOTTERY PROMOTION DEPARTMENT
25 Bridge Street ,Staines Middlesex
TW10 8TP United Kingdon.
CVR-nr. 25554493.

This is to inform you that have been selected for a Cash prize of
£10,0000,000.00.(Ten Million Great British Pounds) and a brand new Toyota
Prius car International programs held 2009 in London Uk.

You can view our website to view your car
(http://www.toyota.com/prius)
Description Of New Toyota Car to be Shipped to you.
Miles:New.......................Doors:4 doors or
more
Transmission:Automatic............Interior:Tan
Engine:4 - Cylinder....................Year:2009
Warranty:Existing.................Cruise Control
Title:Clear.......................Exterior:Red
Condition:New.....................Engine: 1.9L DOHC
MPFI VVT-i
16-valve 4-cylinder engine w/integ
CD Player.........................Side Airbags
Passenger Airbag..................Driver Airbag
Anti-Lock Brakes..................Air Conditioning
Power Windows.....................Power Locks

The selection process was carried out through random selection in our
computerized email selection system(ess) from a database of over 250,000
email addresses drawn from all the continents of the world.This Toyota car
Lottery is approved by the British Gaming Board and also Licensed by The
International Association of Gaming Regulators (IAGR).This promotional car
lottery is the tenth of its kind and we intend to sensitize the public.

To begin the processing of your prize you are to contact your claims officer
through our accredited Prize Transfer agents as stated below:

Mr. Kelly White
25 Bridge Street ,Staines Middlesex (Googling addresses can be fun.)
TW10 8TP United Kingdon
Email: infoweb234@aim.com (Imagine that! Toyota uses AOL!)
Phone Number: +44 703 192 5961 (Googling phone numbers can be enlightening.)

When contacting him, please provide him with your secret pin code Y7448500
and your reference number 799BV90.You are also advised to provide him with
the under listed information as soon as possible:

CLAIMS REQUIREMENT:
1.Name in full :
2.Address :
3.Nationality :
4.Age :
5.Sex :
6.Occupation:
7.Phone/Fax:
8.Present Country:

If you do not contact your claims agent within 7 working days of this
notification,your winnings would be revoked.Winners are advised to keep their
winning details/information from the public to avoid fraudulent claim
(IMPORTANT) pending the transfer/claim by Winner.

Accept my hearty congratulations once again!

Regards
Mr. Tedy Lee
Lottery Manager.

I'll wait for my reward in the afterlife...

Reward proposal for you.‏
From: Mubaraq Ahmed (mugaraq@help.com)
Sent: December 15, 2009

Hello.As you read this,I don't want you to feel sorry for me,because,I believe
everyone will die someday.My name is Mubaraq Ahmed,an Oil&Gas merchant in U.A.E.
I'av been diagnosed with prostate and esophageal Cancer that was discovered very
late due to my laxity in caring for my health. It has defiled all form of medicine
and right now, I have only about a few days to live according to medical experts.
I need your help in distributing my funds to charities as I have no family.if you
can help me you will take 20% out of the funds and give 80% to the local charities
of your choice.Regards, Mubaraq Ahmed

******

I promise ~ I didn't feel the least bit sorry for him.

Oooooooo - The FBI, no less...

Considering the contents, I think it must be from the Fucking Barrel of Idiots:

Payment Notice From The Federal Bureau of Investigation‏
From: FROM THE FBI robertmueller@fbi.gov
Sent: December 21, 2009

From: Federal Bureau of Investigation
Dept: Anti-Terrorist & Monetary Crimes Division
Office: Washington, D.C. Headquarters
Address: J. Edgar Hoover Building
93 Pennsylvania Avenue, Nw Washington, D.C. 20535-0001

Attention Funds Beneficiary,

This is to officially inform you that your fund which is in Africa has been approved for release by the joint FBI/UN Payment Reconciliation Board. Due to Scam act by African officials we reached to an agreement with them to have the funds released to you via ATM Card. The total sum of $5.7 Million US Dollars which is approved will be loaded in an internationally accepted ATM Card and then sent to your address via courier service, so that you can be picking your funds from any ATM Machine around you in bits at your will.
This measure is to help prevent scam on your bank account and all African bureaucratic bootleggers . Be advised not to expose your banking details to any person in the name of trying to get your funds. We the American FBI is bent on making sure that scam is totally wiped out and with this measure we are taking nobody scam you over this payment.
From our joint decision we choose ATM UNIT GHANA to be the office to release the funds to you since the country has been tested politically and otherwise, the we approved them for this payment reconciliation of every funds owned to foreigners by African governments.
You are advised to contact the ATM UNIT GHANA via their contact information as noted below:

NAME: DR. PETER AMAH (ATM UNIT DIRECTOR)
EMAIL ADDRESS: atmunitghana1@emailclick.com
TELEPHONE: +233- 2- 47189890

Contact them immediately and let them know that the FBI directed you to them for your funds release via ATM Card. Do provide them with the following reconfirmed information as stated below to avoid any mistake:

1. Your Full Name________________________________________________
2. Your Full Address______________________________________________
3. Your Telephone Number________________________________________
4. Your Occupation_______________________________________________
5. Your Age___________________

Do not send your banking details to them for security reasons. We guarantee this payment and always feel free to ask us any question if the need be until you have received your ATM Card.
Thanks,

Robert S. Mueller, III
(FBI Director)

*********

Header Analysis

The following IP addresses were extracted from your headers:

IP Address	Probable Country
222.186.126.25	China (Zhenjiang)
82.128.34.26	Nigeria (Lagos)
* The last IP listed is usually the originating IP address

I think there's something just a little bit greasy about this one...

Please let me know if my email received.‏
From: Rebecca rebeccataylor26@live.com
Sent: December 21, 2009

Rebecca L.Taylor,
Address-13400 Alexis-Nihau Boulevard,
Saint-Lauren Monaco.
Phone-+37-2531-97748.

Pardon me if I have offended you by contacting you through this medium (e-letter)
I should have explained this to you on face-to-face meeting. But I could not do this because of the situation, and again not being sure of your reaction. I hope you will keep this little secret I'm about to share with you personal and confidential to yourself.

Its about my husband, who is a sailor with INTERMAS SHIPPING COMPANY IN NEITHERLAND. He worked as a crew member in one of their vessels MV KIMOLUS which was leased to Kuwait Oil Corporation LLC.

During one of such routine sail assignment, their Vessel was loaded with Contaminated Crude Oil which was to be disposed off at a designated discharge point. But rather they thought otherwise and contacted an Indian buyer, who indicated interested in the product and also directed them to discharge the product to his Tank Farm in South Africa .

The deal was struck, sealed and payment was made with regards to same and the proceeds of this deal were shared among them (my husband and others) accordingly. However, the deal was not to the knowledge of the company, because of International Purchase Agreement on contaminated product. But my husband decided to deposit his share of the proceeds with a financial institution under an untitled holding account, so it will not be traced to him, in case investigation into the discharge of the contaminated oil is initiated. So far so good, nothing of such has happened since the death of my husband 10 months ago of pneumonia.

It has taking me 2 months of fervent prayer to let the cat out of the bag and I thought it wise and led by the spirit to disclose this now and ease my mind of unnecessary tension, in expectation of your assistance to help secure the release of the money from the financial institution.

Please let me know what to do? If it is something you can handle, as my husband made me promise on his death bed not to go near the funds, until I find someone who can assist in securing the release and payment of the funds. As he wouldn't want the money to be traced or associated with any member of his family.

I shall furnish you with further detailed information as I await your kind response directly to: rebeccataylor25@live.com.

Thank you for finding out time to read my letter.

Kindest Regards.
REBECCA TAYLOR

Has my blog gone to the dogs?

An opportunity to make money from your blog!‏
From: Dog Health Problems (healthdog0182@in.com)
Sent: December 22, 2009

Hello ******@hotmail.com,

Now you have a great opportunity to earn 25% per sale for every product you sale, through your website.
You need to just place these links on your website.
You just need to place these links on your website and start making some money!

http://**dog-health-problems.org/bloggers/offer.php?p=1&u=439
or
** dog-health-problems.org/bloggers/offer.php?p=1&u=439">Dog Pain Relief

We already have created an account for you. You can always login to your account and check money you have earned. We pay
every month for money you made last month!

http://dog-health-problems.org/bloggers/
Username: *****@hotmail.com
Password: 12345

I am here to always help you.

Thanks,
Shiela

********

WHOIS information:

Domain Name:DOG-HEALTH-PROBLEMS.ORG
Created On:13-Oct-2009 11:37:30 UTC

Interesting, I'll grant you....

Grant Number: MICC/97846563459/206‏

From: e.blokdijk@hetnet.nl
Sent: December 22, 2009

MICROSOFT®

(UK. Regional Office)
Microsoft Building, Wright Lane,
Kensington London W85sp.

Winner No. 005,

It is obvious that this notification will come to you as a surprise but please find time to read it carefully as we congratulate you over your success in the following official publication of results of the E-mail electronic online Sweepstakes organized by Microsoft Corporation ,in conjunction with the foundation for the promotion of software products,(F.P.S.) held today 22nd December 2009 here in United kingdom, A Draft of $1,000.000.00 (One Million United States Dollars) will be issued in your name.

It is important to note that your award was released with the following particulars attached to it.
(1) File Number: F1267-2009
(2) Ref. Code :KP23/857/MCL5 /CO
(3) Grant Number: MICC/97846563459/206

Forward The Following Information as Listed Below and Send to Asset Management & Finance Group Office [ Microsoft Corporation Consultancy Firm].

.Residential address:
.Tel(Mobile):
.Nationality/Country:
.Full Names:
.Age/Sex:
.Occupation/Position:

Asset Management & Finance Group Office :
51a High Street, Hanham, Bristol. BS15 3DQ.
Director : Mr. Alexander Godson
Contact Email:alexandergody@live.com
Tel:+447010306574

Soon as The Above Information is Received Through E-mail: alexandergody@live.com,You Will Be Duly Informed

Furnish me with a few details, eh....

Subject: Your Blog Featured at Home Furniture Depot‏

From: home furniture homefurniture@in.com
Sent: December 10, 2009

Hello,
This is Shiela from homefurnituredepot.net.
We stumbled on your blog while searching for Exclusive Furniture related information. We operate the largest Home Furniture & Office Furniture website featuring more than 30,000 blogs. Our site averages 200,000 unique visitors per month. As a kind note We have featured your blog at http://homefurnituredepot.net/blog_awards/index.php?id=143 We would be grateful if you could add the following details to your blogs main page.
Home Office Furniture
Looking forward for your confirmation.
Thanks
Shiela
homefurnituredepot.net.

Gassy wee montebanks, wot?

Date: Thu, 10 Dec 2009 12:05:28 -0000 (GMT)

Subject: MESSENGER FROM CHEVRON-TEXACO

From: "CHEVRON/TEXACO OIL AND GAS COMPANY" chvjddoma@yahoo.com
Reply-To: cttt-2009@discuz.org

Attn: Chevron-Texaco Beneficiary

Your verification number is: (CT-389-6373,FGN/P-073-92)(Dunno, Mrs. Victoria
Wallison ~ all of a sudden I don't feel so very special any more.
http://itccommunicationsnet-johnnichols.blogspot.com/2009/12/inbox-call-to-confrim-they-are-still-at.html)
We wish tocongratulate you over your email success in the Chevron-Texaco computer
balloting sweepstake held recently.your price is worth $300,000.00 USD
United States Dollars. you are to contact your CLAIMS PROCESSING OFFICER
with your:

1.full name
2.Home Address:
3.Age:
4.Phone Number:
5.Occupation.
6.Amount Won:
7.Annual Income(Optional).
8.Delivery mode.
Via Bank Transfer Or
Via Courier Delivery

CLAIMS PROCESSING OFFICER:

Payment Officer General Information
Name: Mr Alhaji Musa Aliu Mohammad
Email:cttt-2009@discuz.org
Telephone:+234-705 81 56 183 (http://www.419report.org/419-phone-2009-11.htm)

        +234-808 79 26 131  (http://www.419report.org/419-phone-2009-11.htm)

Fax:     +234-707-226-2983-6. (http://antifraudintl.org/showthread.php?t=19792;
         http://k0bkl.org/abuse/lottery.html; 
         http://www.delphifaq.com/faq/scams/f987.shtml?p=159;
         http://419archive.blogspot.com/2009_02_01_archive.html;
         http://zoqy.blogspot.com/2009/08/todays-e-mail-scams_578.html)

       West Africa Office.

All response should be forewarded to (Mr Alhaji Musa Aliu Mohammad)
Co-sponsors of this online promotion are listed herein: Shell Oil Company,
Pepsi Corporation, and the Federal Government of Nigeria.

NOTE: You must have received different emails from different angles,
which are fraud mails, DO NOT DIS-REGARD THIS EMAIL AS IT'S NOT A FRAUD,
as this Organization is a 100% Scam Free.

Yours Faithfully,

Mrs Victoria Wallison (http://antifraudintl.org/showthread.php?t=20670; 
http://gariell.wordpress.com/2009/03/20/mrs-victoria-wallison-fedex-parcel-scam/)

Royal pain in the ass....

I don't have a Royal Bank of Canada account ~ of that, I am really quite certain. I wish the knobheads flooding my mailbox with scammail trying to get me to click on their miserable links would be just as certain.

The links they used have been edited out. I'm quite certain that 99% would have the sense not to click on them but there are those few who just have to have a look. If it isn't safe for me to click on, it's not gonna do them any good either.

The name of their game is 'Click on the link'. Whether they use it to con personal information from you, infect your computer with malware, whatever...., they gain nothing if you don't click.
99.99% of the time DO NOT CLICK ON LINKS IN YOUR EMAILS ~ particularly unsolicited ones. About the only time I do any more is if I am registering for a site and they send me a
confirmation email.

If you receive an email from banks, credit companies, Paypal, EBay, etc... requesting personal information or that you need to up-date with them and you find yourself looking at a link, open a new window, go directly to their website and deal with them there. Or by phone ~ old-fashioned to be sure, but I like it.

I used http://headertool.apelord.com/headers to check the headers on the emails because I usually find it quite useful. Computer savvy scammers have no difficulty covering up their tracks from the average user (including faking IP addresses) but I thought it was interesting to note that there was no consistent information as there would be if it were actually the RBC.


From: Royal Bank of Canada service@rbc.ca
Date: 30 Nov 2009
Subject: You have one new message from Royal Bank of Canada

Please update your RBC Royal Bank account.
Your Internet Banking Account may be locked. (or not even
exist, eh?)
Please identify yourself by visiting our Online Banking
service: (link)

**************

From: RBC Royal Bank idpfxo@yahoo.com
To: donotreply@rbc.com
Subject: New Message from Customer Service - KCGYIWILQE
Date: Tue, 1 Dec 2009

From:      Customer Service
Date:      01/12/2009
Subject:   Unsuccessful login attempt from IP address: 89.202.19.215 (Germany)

For your security, your online profile has been locked.
- Protect your personal account information by following the link bellow: (link)

We appreciate your understanding as we work to ensure account safety.
DO NOT REPLY TO THIS EMAIL. IF YOU HAVE QUESTIONS PLEASE CONTACT US .

Copyright 2009 RBC Financial Group Registered Number 3950882 2009.

The following IP addresses were extracted from your headers
IP Address  Probable Country  
75.149.139.109  Algeria  
76.248.224.105  Ireland (20842)  
* The last IP listed is usually the originating IP address

*************

Reply-To: noreply@rbc-royalbank.ca
From: "RBC Royal Bank" email-id@rbc-royalbank.ca
Subject: Reference ID: CPIQVMFIXK
Date: Tue, 1 Dec 2009

Dear Customer,

We would like to inform you that your RBC Royal Bank online account has been
locked due to inactivity. To avoid losing important information, you must
reactivate your RBC account now.

Click here to confirm your information and unlock your online banking: (link)

Thank you for using RBC Royal Bank.
___________________________

Please do not reply to this email. This mailbox is not monitored and you will
not receive a response. For assistance, log in to your RBC online banking and
choose the Help link located in the bottom right corner.

You are receiving this email notification because this email address is listed
as the administrative contact email for your RBC Royal Bank account.

Copyright © 2009 RBC Royal Bank of Canada

The following IP addresses were extracted from your headers:
IP Address  Probable Country  
83.138.66.82  Cape Verde  
70.46.232.115  N/A (49221)  
* The last IP listed is usually the originating IP address


************

Reply-To: noreply@rbc-royalbank.com
From: "RBC Royal Bank" email-id@rbc-royalbank.com
Subject: Action Required: Please update your RBC account
Date: Tue, 1 Dec 2009

Your privacy on the Internet is of the utmost importance to us. To
protect your account against unauthorized use, RBC Royal Bank requires
you to create sign-in questions and answers.

Anytime you login from a different IP address, you will have to answer
one of these security questions. Make your RBC Royal Bank online banking
even more secure by updating your account now.

Please create Security Questions and Answers for your RBC Royal Bank online
account by going to: (link)

We strongly advise you to enroll now. The new security measures will be
effective right away.

Thank you for using RBC Royal Bank.

The following IP addresses were extracted from your headers:

IP Address  Probable Country  
69.10.138.198  Western Sahara (June Lake)  
70.55.226.34  Jamaica (21754)  
* The last IP listed is usually the originating IP address

*****************

Reply-To: noreply@rbc-royalbank-ca.com
From: "RBC Royal Bank" serv@rbc-royalbank-ca.com
Subject: Customer Service:  Email ID XQJUUXUMMI
Date: Tue, 1 Dec 2009

(link)

The following IP addresses were extracted from your headers:

IP Address  Probable Country  
83.138.147.229  Cambodia (07746)  
24.199.254.142  Germany   
* The last IP listed is usually the originating IP address

****************

Reply-To: 
From: "RBC Royal Bank"
Subject: Customer Service: Email ID

Date: Tue, 1 Dec 2009

(link)

The following IP addresses were extracted from your headers:

IP Address  Probable Country  
217.7.203.173  N/A*  
74.8.95.169  Micronesia, Federated States of*  
* The last IP listed is usually the originating IP address

****************

Reply-To: noreply@rbc-royalbank.ca
From: "RBC Royal Bank" email-id@rbc-royalbank.ca
Subject: Reference ID: MBGSBCPSDP
Date: Tue, 1 Dec 2009

Dear Customer,

We would like to inform you that your RBC Royal Bank online account has
been locked due to inactivity. To avoid losing important information,
you must reactivate your RBC account now.

Click here to confirm your information and unlock your online banking: (link)

Thank you for using RBC Royal Bank.
___________________________

Please do not reply to this email. This mailbox is not monitored and you will
not receive a response. For assistance, log in to your RBC online banking and
choose the Help link located in the bottom right corner.

You are receiving this email notification because this email address is listed
as the administrative contact email for your RBC Royal Bank account.

The following IP addresses were extracted from your headers: 

IP Address  Probable Country 
67.192.109.26  Czech Republic 
70.46.232.115  N/A (49221) 
* The last IP listed is usually the originating IP address

***************

From: RBC Royal Bank erpydl@yahoo.com
To: donotreply@rbc.com
Subject: Transfer status: PENDING - ID: NRTHNZPMFR
Date: Wed, 2 Dec 2009

This email confirms that you have transferred  A1-MOBILE using Money Transfer.

Transfer id : 250010358176
Price : 110.00 CAD
Transfer Fee: 15.00 CAD
Subtotal : 125.00 CAD
__________________

To cancel payment please confirm account ownership by following the link below:

http://mail.bcmanor.com/RBC-rbcaccess.html
__________________

DO NOT REPLY TO THIS EMAIL. IF YOU HAVE QUESTIONS PLEASE CONTACT US .
Copyright 2009 RBC Financial Group Registered Number 3950882 2009.