Information on romance scams and scammers.
by Bankster Fri Apr 23, 2010 2:45 pm
Initial message:

Return-Path: <[email protected]>
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: from smtp1-pc.aruba.it (smtp183-pc.aruba.it [62.149.157.183])
by xxxx (Postfix) with SMTP id 7F294B34867
for <[email protected]>; Thu, 22 Apr 2010 16:36:40 +0000 (UTC)
Received: (qmail 18976 invoked by uid 89); 22 Apr 2010 16:36:35 -0000
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on smtp1-pc.ad.aruba.it
X-Spam-Level: ****
X-Spam-Status: No, score=4.0 required=5.0 tests=BAYES_50,MIME_HTML_ONLY,sp176
autolearn=no version=3.2.5
Received: from unknown (HELO localhost) (10.10.176.106)
by smtp1-pc.ad.aruba.it with SMTP; 22 Apr 2010 16:36:35 -0000
MIME-Version: 1.0
X-Mailer: AtMail PHP 5.1
Message-ID: <[email protected]>
To: <[email protected]>
Reply-To: [email protected]
Content-Type: text/html; charset="utf-8"
X-Origin: 210.253.208.91
Date: Thu, 22 Apr 2010 18:36:35 +0200
Subject: hello
From: "jane" <[email protected]>
Content-Transfer-Encoding: quoted-printable

Origin: probably 219.110.2.158 - Japan, via 62.149.157.183 - Italy

hello
my name is jane and iam seeking compatible partner for relationships but
tolerance,kind, honest and sincere person, and please reply so that i you will know more about me
_______________________________________________________________________________
Nuova grafica e nuove funzionalità! Crea subito Gratis la tua nuova Casella di Posta Katamail
Advertisement

by Bankster Fri Apr 23, 2010 2:58 pm
Second message:

Return-Path: <[email protected]>
X-Original-To: [email protected]
Delivered-To: [email protected]
Received: from web46211.mail.sp1.yahoo.com (web46211.mail.sp1.yahoo.com [68.180.199.152])
by xxxx (Postfix) with SMTP id 93661B3484A
for <[email protected]>; Fri, 23 Apr 2010 11:30:57 +0000 (UTC)
Received: (qmail 41346 invoked by uid 60001); 23 Apr 2010 11:30:56 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1272022256; bh=VyIbT5iUffKAArZssZtKF6Ks4u6bt/LN1gF/zpGm3X4=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=dNaxGxGqiKU/aW6gFIPSNrdyCG8mc5xRdV+RkAHBLhhxI/MNyIdJllmcPeOiO8xebcvABJQ/2ZjUCi5RoMedRDoGSCIsYnjymWH+QEKuVA2EvhXkC6YvvRb89jQqeW6/uNB0azxNgXvttQ55yN61xsCCn/s72MDm4SiO7xf0jTQ=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:<snip>
Message-ID: <[email protected]>
X-YMail-OSG: lIBJ0DIVM1nTGGeVjgU6eA89Paihkab_v6D1XpLFnY9DDad
_0_iLm3pODLILLPlo2gvHOc9uNNnR33YoPj5h5d93HkRejl0FfTkdCSvvKzU
<snip>
OVTBQ7.pupD5eAFwiclsw1LQvrUHkRFgCO8oK8QrZmBvMBzGM8tlsCGT2X2b
0pE6xDuEfXXlgjO70TSFmeOPu
Received: from [196.207.195.9] by web46211.mail.sp1.yahoo.com via HTTP; Fri, 23 Apr 2010 04:30:55 PDT
X-Mailer: YahooMailClassic/10.1.9 YahooMailWebService/0.8.102.267879
Date: Fri, 23 Apr 2010 04:30:55 -0700 (PDT)
From: Jane Saleeby <[email protected]>
Subject: FROM JANE
To: Xxxx Xxxx <[email protected]>
In-Reply-To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1603691362-1272022255=:41194"

Origin: 196.207.195.9 - Senegal

Hello My Dearest One,
First I thank you for your reaction to mine email on-line, with the message, which I have sent to you. How was your night over there in your country,l believe you had a nice night and that the atmosphere over there in your country is very nice today? Mine is a little bit warm over here in Dakar Senegal.
My name is miss Jane Medi, l am (22) but age doesn't matter in a real relationship, so l am comfortable with your age,I am from Darfur Region of Sudan ,5.4ft tall, light in complexion single,(never married ) and presently l am residing here in Dakar as a result of the civil war that was fought in my country Sudan.

My late father Dr.Desmond Medi,was a politician and the Chairman, Madi Oil and Gas Company a private extracting oil firm in Darfur before the rebels attacked our house one early morning and killed my mother and my father in cold blood.

It was only me that is alive now and I managed to make my way to this country Senegal where l am leaving now as a refugee under a Reverend-father's care and l am using the computer in his office to send these messages to you.
I would like to know more about you. Your likes and dislikes.
Please reply me, ok. this is my picture below.
yours baby
Miss Jane.
Image

The URL of the embedded picture is http://userpics-70.hi5.com/userpics/870 ... 70.img.jpg - possibly an innocent person's hi5 profile.
Last edited by Bankster on Fri Apr 23, 2010 3:22 pm, edited 1 time in total.
by Bankster Fri Apr 23, 2010 3:21 pm
Telltale signs of a scam:

  • The initial message has been sent by an anonymous mass mailer. (Note how "Jane" claims to be in Senegal, but "her" first mail has been sent from Japan.)
  • The replies are totally generic. "Dearest One" instead of my name, "your country" instead of my country's name, and so on. The same template is sent to everybody who replies.
  • Her parents were wealthy but got killed. She lives at a refugee camp (but there's bound to be a lot of money somewhere) and there's a reverend helping her. This is a very common scenario for scammers.
  • "Jane" can't make her mind up whether her last name is Saleebi or Medi. (It can't be her maiden name either as she's never been married.)
  • "She" calls me "dearest one" and signs off with "your baby" already even though she knows nothing at all about me.

This will likely turn into a classic scam where she asks for monetary help to retrieve her family's fortune, "so that we can marry and share the money."

Who is online

Users browsing this forum: ClaudeBot, Google [Bot] and 51 guests