Email Spam Filter:
jwSpamSpy
Try it for free!


About spam / "419" / Blog
jwSpamSpy
Recent spam domains
Spam domain blacklist

Software
Links
joewein.de
joewein.net
Contact
Google

 

419 Scam – "MEGA MILLION E-MAIL LOTTO /MEGA MILLION LOTTO INTERNATIONAL SPA / FREDRICKS LINDA"

"MEGA MILLION E-MAIL LOTTO / MEGA MILLION LOTTO INTERNATIONAL SPA / ZENITH TRUST AND FINANCIAL SERVICES" is a fake fake lottery company and fake securities company operating in Italy. (see one example scam email here). They tell people they won in a lottery and then charge a €500 processing fee for paperwork supposedly necessary to pay out the non-existent prize. The website of the "securities company" to which the payment is to be made is registered using a fake postal address.

jwSpamSpy
Are you sick of spam too? Do you want it stopped now?
Try jwSpamSpy, the spamfilter we use to track the spammers!
Free 30-day trial version available now!

Example of fake winning notification email:

FROM THE DESK OF THE VICE PRESIDENT MEGA MILLION E-MAIL LOTTO INTERNATIONAL PROGRAM
VIA CARLO ALBERTO 35,
20142 MI,
MILANO,
ITALIA.
INTERNATIONAL E-MAIL LOTTO PROMOTIONS/PRIZE AWARD.
BATCH NO: MMEL/EU/0976/00007/003
REF. No: MMEL/EU/67230/10321/231
WINNING NOTIFICATION / FINAL NOTICE, END OF THE YEAR SWEEPSTAKES
This is to inform you of the release of the MEGA MILLION E-MAIL LOTTERY BALLOT INTERNATIONAL/ WORLD GAMING BOARD held on the 4th of December 2004 and the results released on the 6th of December, 2004.
Your email address attached to Ticket No:0065430 with Serial No 21605 drew the lucky numbers of 86-15-65-25-28-90 which consequently won the lottery in the 2nd category. You have therefore been approved for a lump sum payout of $500,000.00 Dollars (Five Hundred Thousand United States Dollars) in cash credited to file REF. No: MMEL/EU/67230/10321/231. This is from a total cash prize of $23.7million United States Dollars shared among several international lucky winners in the premium, 1st, 2nd and 3rd categories respectively. Due to mix up of some numbers and names, we ask that you keep yourwinning information confidential until your claims has been rocessedand your money Remitted to you. This is part of our security protocol to avoid double claiming and unwarranted abuse of this program by some participants.All participants were selected through a computer ballot system dran from only Microsoft users from over 350,000 companies, and 25,000,000 individual e-mail addresses all over the world.To begin your lottery claim, do contact the claims manager on
MRS. FREDRICKS LINDA
CLAIMS MANAGER
MEGA MILLION LOTTO INTERNATIONAL SPA
megamillionclaim@netscape.net
Note that all winning must be claimed not later than 17th February,2005.
After this date all uncaimed funds will be included in the next stake.
Please note in order to avoid unnecessary delays and complications do remember to quote your reference number and batch numbers in all correspondence.
Furthermore, should there be any change of address do not hesitate inform your claims manager as soon as possible.
Congratulations once more from our members of staff and thank you for being part of our promotional program.
Note: Anybody under the age of 18 is automatically disqualified.
Yours Sincerely,
ANTONIO BELLUCI
megamillionlotto@zwallet.com
Lottery Coordinator

Example of response from fake security company (notice the classic all-capitals "I'M SCREAMING AT YOU" Nigerian style :-)

DR.LEONARD HENDRICKS
ZENITH TRUST AND FINANCIAL SERVICES
WEB SITE: www.zenithsecurities.com
FAX:+39 02 95 44 12 56
2004-11-15

ATTN: FIRSTNAME LASTNAME,

RE:TRANSFER:FIVE HUNDRED THOUSAND UNITED STATES DOLLARS (US$500,000.00)

CONSEQUENT UPON THE CONFIRMATION WE RECEIVED FROM THE MEGA MILLION
LOTTOMATICA SpA AND AFTER DUE VERIFICATION AND SCRUTINY WE CONTACT YOU FOR
THE TRANSFER OF YOUR WINNING PRIZE MONEY OF US$500,000.00 WON THROUGH THE
E-MAIL COMPUTER INTERNATIONAL LOTTERY.

YOU ARE HEREBY ADVISED TO GO TO ANY WESTERN UNION MONEY TRANSFER POINT AND
TRANSFER THE SUM OF FIVE HUNDRED EUROS(500.00EUROS) TO OUR DIRECTOR OF
ACCOUNTS .THIS PROCESSING FEE IS FOR THE OBTAINING OF THE NON RESIDENT
DOCUMENTS FROM THE MINISTRY OF FINANCE AND THE LOCAL LOTTO COMMISSION FOR
THE TRANSFER OF YOUR WINNING PRIZE MONEY.IT IS NOT OUR DUTY AS YOUR FUND
MANAGERS TO PAY FOR THE PROCESSING OF YOUR WINNING PRIZE MONEY.

AND IT IS NOT POSSIBLE FOR US TO DEDUCT THE PROCESSING FEES FROM THE
WINNING PRIZE MONEY BECAUSE OF THE INSURANCE BOND PLACED ON IT AND IT IS
FORWARDED TO US IN A CROSSED CHEQUE AND THIS MAKES IT IMPOSSIBLE FOR IT TO
BE TAMPERED WITH, AS THE WINNING PRIZE MONEY WILL REACH YOUR ACCOUNT
INTACT.

BASED ON THE ABOVE, YOU ARE ADVISED TO GO TO ANY WESTERN UNION NEAREST TO
YOU AND TELL THEM THAT YOU WANT TO TRANSFER FIVE HUNDRED EUROS TO REMY
SELLIN WITH THE FOLLOWING INFORMATION.THEY WILL SEND THE MONEY AND GIVE
YOU A 10DIGIT NUMBER THAT YOU WILL FORWARD TO US.WITH THIS NUMBER, THE
DIRECTOR OF ACCOUNTS WILL GO TO THE WESTERN UNION AND RETRIEVE THE MONEY
AND PROCEED TO THE MINISTRY AND LOCAL LOTTO COMMISSION FOR THE DOCUMENTS
TO FACILITATE THE TRANSFER OF YOUR WINNING PRIZE MONEY.

NAME: REMY SELLIN

ADDRESS:VIA PININFARINA 42-44

CITY:TORINO (TURIN)

COUNTRY: ITALY.

GO THROUGH THE ATTACHMENTS AND RETURN THE COMPLETED PAYMENT SCHEME FORM
WITH A RECEIPT OF PAYMENT FROM WESTERN UNION SHOWING THE TRANSFERED
PROCESSING FEES.

WE AWAIT YOUR URGENT RESPONSE AS WE LOOK FORWARD TO SERVE YOU BETTER.

REGARDS,

DR.LEONARD HENDRICKS
DIR.FOREIGN PAYMENTS.

Here were the message headers:

Received: from zenithse by discover.clusterdns.com with local (Exim 4.43)
	id 1Cef0Q-000709-VG
	for emailaddress; Thu, 16 Dec 2004 03:40:15 +0800
Received: from 213.140.6.111 ([213.140.6.111])
        (SquirrelMail authenticated user zenithse);
        by www.zenithsecurities.com with HTTP;
        Thu, 16 Dec 2004 03:40:14 +0800 (SGT)
Message-ID: <55771.213.140.6.111.1103139614.squirrel@213.140.6.111>
Date: Thu, 16 Dec 2004 03:40:14 +0800 (SGT)
Subject: NOTIFICATION/PROCESSING FEES/MEGAMILLION
From: zenithse@zenithsecurities.com

This email was actually sent from Italy:

     inetnum:      213.140.6.96 - 213.140.6.111
     netname:      FASTWEB-RESIDENTIAL-09
     descr:	      Infrastructure for Fastweb's main location
     descr:	      NAT IP addresses for residential customer, public subnet
     country:      IT
     admin-c:      IRS2-RIPE
     tech-c:       IRS2-RIPE
     status:	      ASSIGNED PA
     mnt-by:	      FASTWEB-MNT
     changed:      IP.RegistrationService@fastweb.it 20040224
     remarks:      In case of improper use originating from our network,
     remarks:      please mail customer or abuse@fastweb.it
     remarks:      INFRA-AW
     source:	      RIPE
     
     route:        213.140.0.0/20
     descr:        Fastweb Networks block
     origin:       AS12874
     remarks:      1st block released to it.fastweb local registry.
     mnt-by:       FASTWEB-MNT
     changed:      IP.RegistrationService@fastweb.it 20020805
     remarks:      In case of improper use originating from our network,
     remarks:      please mail customer or abuse@fastweb.it
     source:       RIPE
     
     person:       ip registration service
     address:      Via Caracciolo, 51
     address:      20155 Milano MI
     address:      Italy
     phone:        +39 02 45451
     fax-no:       +39 02 45451
     e-mail:       IP.RegistrationService@fastweb.it
     nic-hdl:      IRS2-RIPE
     remarks:
     remarks:      In case of improper use originating from our network,
     remarks:      please mail customer or abuse@fastweb.it
     remarks:
     notify:       IP.RegistrationService@fastweb.it
     changed:      IP.RegistrationService@fastweb.it 20011218
     source:       RIPE

Here is the completely bogus WHOIS record for the "security company":

     Registrant:
     	 Joswin neutralmugu@yahoo.com +868.931425166
     	 Joswin Inc.
     	 13421 Industrial Layout
     	 Careamo,DIttoli,TT 34213
     
     
     Domain Name:zenithsecurities.com 
     Record last updated at 2004-09-30 14:32:36
     Record created on 2004/9/30
     Record expired on 2005/9/30
     
     
     Domain servers in listed order:
     	 ns2.surf7.net 	 ns1.surf7.net 
     
     Administrator:
     	 13421 Industrial Layout
     	 Careamo
     DIttoli,
     TT
      34213
     
     	 name:(Joswin) 
     mail:(neutralmugu@yahoo.com) +868.931425166
     	 Joswin Inc.
     Technical Contactor:
     	 13421 Industrial Layout
     	 Careamo
     DIttoli,
     TT
      34213
     
     	 name:(Joswin) 
     mail:(neutralmugu@yahoo.com) +868.931425166
     	 Joswin Inc.
     Billing Contactor:
     	 13421 Industrial Layout
     	 Careamo
     DIttoli,
     TT
      34213
     
     	 name:(48) 
     mail:(neutralmugu@yahoo.com) +868.931425166
     	 Joswin Inc.
     
     Registration Service Provider:
     	name: Surf Seven Network 
     	tel: +60.124683101
      	fax: +60.124683101
      	web:http://www.surf7.net


Mega  Million Dollar  International Lotteries
European  Promotional Draws
****************************************************
Via Gallarate  Nr.  156
20152  Milano
Italia
*****************************************************
Claims Department
Ref: MMCAN/652311872/05
Batch: 074/05/369MM
                                   WINNING NOTIFICATION:
We happily announce to you the draw of the Mega Million Dollar  Sweepstake
Lottery International programs held on SATURDAY 5TH OF FEBRUARY, 2005.
in ITALY.
Your e-mail address attached to ticket number: 564700564321 with Serial number
4265/02 drew the lucky numbers: 31-05-75-67-25-04, which subsequently won you
the lottery in the
2nd category. You have therefore been approved to claim a total sum of
Seven  Hundred And Fifty Thousand United States Dollars ( US$ 750,000.00 ) in
cash credited to file Ref. No: MMCAN/652311872/05.This is from a total cash
prize of US $ 11,250,000.00  , shared amongst the first Fiftenn (15) lucky
winners in this category.
All participants were selected randomly from World Wide Web site
through computer draw system and extracted from over 150,000 individual/
company  e-mail addresses. This promotion takes place annually.
In view of this, your US$750,000.00  ( Seven Hundred And FiftyThousand United
States Dollars) would be released to you by our payment office in europe.
To begin your lottery claim, do contact the claims manager :
MR.  RICHARD  SMITH
CLAIMS MANAGER
MEGA MILLION DOLLARS LOTTERIES
mmdollarclaim@netscape.net
Note that all winning must be claimed not later than 11th April,2005.
After this date all unclaimed funds will be included in the next year
sweepstake.
In order to avoid unnecessary delays and complications do remember to quote your
reference number and batch numbers in all correspondence.
Furthermore, should there be any change of address do not hesitate inform your
claims manager as soon as possible.
Congratulations once more from our members of staff and thank you for being part
of our promotional program.
Yours Sincerely,
MRS. ANNA  MARIA  ARMELIANI
megamilliondollar@zwallet.com
Lottery Coordinator
********************************************************************************
DISCLAIMER: This communication is for the exclusive
use of the intended recipient (s) and shall not attach
any liability on the originator, Mega Million Dollar Lottery.
If you are the addressee, the contents of this
letter are intended for your use only and it shall not
be forwarded to any third party, without first
obtaining written authorizations from the originator.
It may contain information, which is confidential and
legally privileged and the same shall not be used or
dealt with by any third party in any manner without
the specific consent of Mega Million Lottery Int. CAN.