jwSpamSpy Recent spam domains Spam domain blacklist
Links joewein.de joewein.net Contact |
|
|
419 Scam – There is no "European Gaming Commission"
- About the 419 (Advance Fee) scam
- Phone numbers used by 419 scammers
- How to report 419 spam to us
- Frequently asked Questions (419 FAQ)
- Opinions about the scammers and their victims
- Domains registered by 419 scammers
- Company names mentioned in 419 spam
- Names of people mentioned in 419 spam
- What can you do when you receive 419 spam
Many lottery scams mention an institution called "European Gaming Commission" or regulations supposedly enforced by that institution. In reality no such entity exists. Every EU member state that runs a national lottery regulates it according to its own laws. There is no central authority for this. Therefore any email related to a lottery prize you're supposed to have won that mentions a "European Gaming Commission" is a case of fraud, which you may report to the police. The same is true for the "International Gaming Board", which does not exist. The "Gaming Regulators European Forum (GREF)" mentioned in some scam emails does exist, but it is a discussion forum without regulatory powers. On its website it specifically warns of "promotional lottery" scams by email that request advance fee payments.
Other fake lottery emails request payments for "Anti-Terrorism certificates" or "Drug-Free certificates" supposedly issued by the International Court of Justice in Den Haag. No such certificates actually exist.
|
Fraudulent domains:
Sample scam email:
Message headers:
Note that "Daniel Khan" of "Universal Security and Freight UK" is writing from the email address of "Henrick Koenraad" of the "European Gaming Commision", two different fake identities used for the same scam.
WHOIS details for sending network (IP 82.128.3.181):
WHOIS details for domain "eu-gamingcommission.net" (created 2005-01-27, complaints to abuse@msn.com)
Attention: Firstname Lastname
This is to notify you that the time frame for unprocessed winnings has
almost elapsed. You are adviced to either process your winnings on or before
5th OF March (12 NOON GMT) or forfeit your prize money.
If you do not respond to this message positively, it will be taken as an
acknowledgement of this notification.You are advised to act promptly as we
will not be liable for forfeiture of your winnings. As all previous
correspondence will be disregarded. Also note most importantly that we do
not deal with second or third parties in the payment of winnings. We only
deal with winners who are ascertained legitimate winners. Do not send
anybody as he would not be attended to. If he has the funds he can transfer
through western union with the information given below;
Jack Smith
London, UK.
I will advice that you oblige the claims procedure to avoid any
inconvenience or cancellation of winnings which is getting close.
I look forward to your prompt response.
Regards,
Mr. Daniel Khan
FOREIGN SERVICE MANAGER,
UNIVERSAL SECURITY & FREIGHT UK
Received: from 82.128.3.181 by by21fd.bay21.hotmail.msn.com with HTTP;
Mon, 28 Feb 2005 19:41:38 GMT
X-Originating-IP: [82.128.3.181]
X-Originating-Email: [henrickkoenraad@eu-gamingcommission.net]
X-Sender: henrickkoenraad@eu-gamingcommission.net
inetnum: 82.128.0.0 - 82.128.31.255
netname: INET-MLTL
descr: Multi-Links Telecommunications Limited
country: NG
admin-c: DG26
tech-c: RIA27
status: ASSIGNED PA
notify: deep@multi-links.com
mnt-by: MLTL-INT-MNT
changed: deep@multi-links.com 20040416
changed: hostmaster@afrinic.net 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
person: Dwaipayan Ghosh
address: 231, Adeola Odeku Street
Victoria Island
Lagos, Nigeria
phone: +23417751039
e-mail: deep@multilinks.com
nic-hdl: DG26
notify: deep@multillinks.com
changed: deep@multilinks.com 20030507
changed: hostmaster@afrinic.net 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
person: IP Admin-RIPE
address: Multilinks Telecommunications Limited
address: 231 Adeola Odeku Str.
address: Victoria Island, Lagos, Nigeria
e-mail: ipadmin@multilinks.com
remarks: complaints/spam report : abuse@multilinks.com
phone: +2341774000
nic-hdl: RIA27
changed: techadmin@multilinks.com 20040331
changed: hostmaster@afrinic.net 20050205
remarks: data has been transferred from RIPE Whois Database 20050221
source: AFRINIC
Request: eu-gamingcommission.net
connected to whois.melbourneit.com [203.27.227.114:43] ...
Domain Name.......... eu-gamingcommission.net
Creation Date........ 2005-01-27
Registration Date.... 2005-01-27
Expiry Date.......... 2006-01-27
Organisation Name.... Eu-Gaming Commission
Organisation Address. 44 Wall Street 22nd Floor
Organisation Address.
Organisation Address. new york
Organisation Address. 10005
Organisation Address. NY
Organisation Address. UNITED STATES
Admin Name........... Eu-Gaming Commission
Admin Address........ 44 Wall Street 22nd Floor
Admin Address........
Admin Address........ new york
Admin Address........ 10005
Admin Address........ NY
Admin Address........ UNITED STATES
Admin Email.......... info@eu-gamingcommission.net
Admin Phone.......... +1.3473288775
Admin Fax............
Tech Name............ MSN NOC
Tech Address......... One Microsoft Way
Tech Address.........
Tech Address......... Redmond
Tech Address......... 98052
Tech Address......... WA
Tech Address......... UNITED STATES
Tech Email........... MSN-PA-TECH@msn.com
Tech Phone........... +1.4258828080
Tech Fax.............
Name Server.......... pdomns1.msn.com
Name Server.......... pdomns2.msn.com
Anti-Terrorism certificates
Drug-Free certificates
No such certificates actually exist. No such certificates are required for International wire transfers.
These fake documents are a tactical device 419 scams to tap victims for more money. They are supposedly issued by the International Court of Justice in Den Haag or by the local government in the country where the "lottery" or "bank" used in the scam claims to be located. Usually the criminals charge thousands of dollars for these fake certificates. Payment has to be sent by Western Union or MoneyGram, which means the recipient of the payment can't be traced. Any email that mentions these certificates and asks you to pay for them is a scam!
Example fraud email:
EU Money Laundry Monetary Team
Amsterdam Netherlands.
Phone: +31-64-921-6227
Fax: +31-84-729-0534
Date: 03/01/06,
Attention: Firstname Lastname,
Be informed that your transfer from Barclays Bank Ref #bls/227/444/wt is already on hold at the EU Apex bank and not even 0.1GBP can be realized from it without the issuance of your Anti-Terrorism certificate from the international court of justice Den Haag in The Netherlands.
Further more, I am sorry deductions can not be made from your funds and as such you would be required to make a personal payment of the required fees.
As soon as we are in receipt of your completed application form more details would be further communicated to you for your prompt attention.
Mr. Thomas Walkden (Sir)
Duty Officer EU MLMT.
--
___________________________________________________
Play 100s of games for FREE! http://games.mail.com/
Message headers:
Date: Tue, 03 Jan 2006 10:14:15 -0500 Subject: Attention: Firstname Lastname Received: from [81.199.161.53] by ws1-6.us4.outblaze.com with http for thom_walkden@europe.com; Tue, 03 Jan 2006 10:14:15 -0500 X-Originating-Ip: 81.199.161.53
WHOIS details for sending network (IP 81.199.161.53):
This is a satellite ISP in Israel that connects a lot of African custoemrs to the internet.
inetnum: 81.199.160.0 - 81.199.161.255 netname: IPPLANET-04 descr: IP PLanet Network range country: il admin-c: TECH6-RIPE tech-c: TECH6-RIPE status: ASSIGNED PA mnt-by: AS12491-MNT mnt-lower: AS12491-MNT mnt-routes: AS12491-MNT source: RIPE # Filtered person: Tech IP Planet address: Yegia Kapaim St. address: Petach-Tikva address: Israel phone: +972 3 9255015 fax-no: +972 3 9217938 abuse-mailbox: abuse@ipplanet.com nic-hdl: TECH6-RIPE mnt-by: AS12491-MNT source: RIPE # Filtered % Information related to '81.199.160.0/23AS12491' route: 81.199.160.0/23 descr: IP Planet Network Ltd origin: AS12491 mnt-by: AS12491-MNT source: RIPE # Filtered
|