Oh, please, post the headers of this thing. :)

Enough to make it worthwhile to keep sending them, yes.
It is a crime not to seperate a fool from his money.

Next time I get one, I'll forward it to you. :) I seem to get one once or twice a year. I've been tempted to screw with their minds, but haven't done so.

These guys are pretty shifty. They almost always have very professional done legal documents and some of these Nigerian letter scammers will actually go as far as setting up fake offices and businesses buildings to physically meet with you there. I remember reading about one where they actually set up a whole freakin' believable bank, tellers, customers, and all, for meeting with "clients".

Zayphod, this is exactly how the email began. In case I don't fully understand, please define "headers".:up:

On your mail client, there's usually an option showing the full headers (which shows the originating IP address, and if it was relayed anywhere).

I used to do a lot of spam-reporting in my younger days.

If you're using Outlook, open the message again, click VIEW then OPTIONS. It should give a box showing the internet headers.

I get big CEO's from countries smaller then Rhode Island that say they are in danger of being hunted down and killed

and apparently I won the UK Powerball at one point

I used to pass their IP's onto colleagues at work who would send them enquiry mails stating they were under suspicion and therefore subject to investigation for distributing illegal or pornographic material.
I seldom got bothered again http://www.satellites.co.uk/satellit...115[1].gif

Just tell em that theres no way you have a rellie in nigeria because your entire family is prone to nigeriosis, a disease that prevents you traveling there because of the risk of death from breathing their air.... then see if they try talk you around it!

Unfortunately, there are enough idiots out there that these Nigerian Letter spammers actually rake in millions. I saw an interview with one of the spammers on Dateline or something like that. The same show where the guy actually set up a realistic fake bank complete with tellers and customers just for show for his scammed client. And Nigeria doesn't really have any laws against it. It exists in a "grey area" that skirts around enforcable law there... and the law is usually paid off by a good chunk of change from the spammer's profits. That's one of the reason these guys mostly work out of Nigeria.

The guy said that 99% of their targets are Americans because American's are the most gullible. More Americans own computers than in any other country, and only about 50% or less really know anything about how to really work with them or spot/troubleshoot problems or reccognise scams. Heck, only about 50% of people use an updated virus scanner. Almost every home in the US has a computer in it but very few of those people who own them actually know how to USE them or protect them.

If you give me a hamburger today I will pay you next Tuesday.

Boombah, boombah. Me for da:

There are laws against this.. Section 419 of the Nigerian penal code addresses "Advance Fee Fraud". But.. as you say.. the law is difficult to enforce.
For some amusing reading go to http://www.419eater.com/ and check out some of the Letter Archives... funny funny stuff there!

I just won the Micorsoft email lottery.....yay!!! $1,000,000!!!

Wonder how hard it would be to scam a scammer, make them pay you some fake fine via western Union or something for scamming. May have to look into that some time lol

I got one to book a 5 star room for two weeks in Nigeria ;)

The 'booking confirmation' was most likely fake, however.

Hey Zayphod, I found out the following header information for you from AOL, hope its useful...

Return-Path: <fmf@oued.org>
Received: from rly-me08.mx.aol.com (rly-me08.mail.aol.com [172.20.83.42]) by air-me07.mail.aol.com (v121.4) with ESMTP id MAILINME073-9d347bb1e40390; Tue, 19 Feb 2008 13:22:12 -0500
Received: from main.brightideasproductions.com (main.brightideasproductions.com [72.51.34.31]) by rly-me08.mx.aol.com (v121.4) with ESMTP id MAILRELAYINME087-9d347bb1e40390; Tue, 19 Feb 2008 13:21:52 -0500
Received: from [81.91.227.14] (helo=User)
by main.brightideasproductions.com with esmtpa (Exim 4.68)
(envelope-from <fmf@oued.org>)
id 1JQwsE-0007MA-Ag; Sun, 17 Feb 2008 19:40:58 -0800
Reply-To: <fmfgov.ng@gmail.com>
From: "INTERNATIONAL CREDIT SETTLEMENT"<fmf@oued.org>
Subject: ATTENTION BENEFICIARY..
Date: Mon, 18 Feb 2008 04:40:50 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - main.brightideasproductions.com
X-AntiAbuse: Original Domain - aol.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - oued.org
X-Source:
X-Source-Args:
X-Source-Dir:
X-AOL-IP: 72.51.34.31
X-AOL-SCOLL-SCORE:0:2:214792464:9395240
X-AOL-SCOLL-URL_COUNT:
X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_helo : n
X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_822_from : n
Message-ID: <200802191321.9d347bb1e40390@rly-me08.mx.aol.com


Good luck with this!:up:

http://network-tools.com/default.asp?prog=trace&host=81.91.227.14


81.91.227.14 is from Benin(BJ) in region Africa
TraceRoute to 81.91.227.14 [unitec14.intnet.bj]


Benin is just two countries east of Nigeria. At work, we have just about all of Benin blocked off at the router level because of the huge amounts of credit card fraud coming from there. Lots of Nigerians work out of there because so much of Nigeria's IP space is being blocked by ISP admins tired of the fact that nothing legitimate comes out of that country. Benin is definately where this originated from.


BTW oued.org in the return path looks pretty bogus as well.

http://network-tools.com/default.asp?prog=express&host=oued.org

Hosted in the USA but not much to it, just a log-in page. Created back on Oct 2005, registered to someone in what looks like Egypt.


(main.brightideasproductions.com [72.51.34.31]) was used as a relay, just in case AOL had decided to block the 81.91.*.* group of IP's. Send the e-mail with headers to abuse@serverbeach.com so they can get that mail server locked down. BTW, brightideasproductions.com is what added those "abuse info" lines to the headers.

3 of those 'relatives' you won't be hearing of for a while:

http://www.ultrascan.nl/html/419_justice_in_court.html

Hmmmm... Almost all the spam I'm getting is coming from Columbia, Spain, Argentina, or Thailand. :hmm:

The Nigerians must not be interested in me anymore. I havn't gotten a good "Nigerian Letter" in a long time.

Probably for Viagra, right? There's a bot-net spamvertising like crazy for it right now, mostly for domain names created with stolen credit cards with questionable "whois" info. DNS servers seem to be hosted in China, of all places. Bot-nets doing this, especially concerning Storm (which created most of this bot-net in the first place) is most likely associated with the Russian Mafia.