Two questions from a newb..

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Elite Baiter Joined: 19 Jan 2009 Posts: 1440

First one is how did a scammer get my real first name? I'm a bit fanatical about never, ever using it on the net anywhere other than placing orders with
well-known merchants. This is my real, ISP based email and I was kind of shocked about this. Should I worry? Any idea how they got my name?

Second, is it possible to find out how many names are on the "to" line of an email? One lotto lad made a mistake and sent my winning email with at least
200 other addys on the "to" line. Of course when I wrote and asked just how many people I had to share the prize with, he never replied. Oops.

Anyway, here's the email that uses my name - just a regular Bank of Nigeria payout from Paul J0hns0n who is a VERY BUSY MAN:

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MTtTQ0w9Mw==
X-Message-Status: n:0
X-SID-PRA: [email protected] <[email protected]>
X-Message-Info: JGTYoYF78jFVC3GQ/SjedX0nzg6qv8IE0qaCf+ffbFoGCXaj30S3f5i5wxpAnZ3KXCr8VOUGxU/PaypXSV6PiOD3RSIu0o02
Received: from tomts1-srv.bellnexxia.net ([209.226.175.113]) by bay0-pamc1-f6.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444);
Fri, 13 Feb 2009 05:37:24 -0800
Received: from toip26.srvr.bell.ca ([67.69.240.28])
by tomts1-srv.bellnexxia.net
(InterMail vM.5.01.06.13 201-253-122-130-113-20050324) with ESMTP
id <20090213133723.DCWU1643.tomts1-srv.bellnexxia.net@toip26.srvr.bell.ca>
for <[email protected]>; Fri, 13 Feb 2009 08:37:23 -0500
Received: from toip19.srvr.bell.ca ([67.69.240.21])
by toip26.srvr.bell.ca with ESMTP; 13 Feb 2009 08:37:15 -0500
Received: from n28.bullet.mail.mud.yahoo.com ([68.142.206.223])
by toip19.srvr.bell.ca with SMTP; 13 Feb 2009 08:37:14 -0500
Received: from [68.142.200.227] by n28.bullet.mail.mud.yahoo.com with NNFMP; 13 Feb 2009 13:37:14 -0000
Received: from [76.13.13.25] by t8.bullet.mud.yahoo.com with NNFMP; 13 Feb 2009 13:37:14 -0000
Received: from [76.13.10.171] by t4.bullet.mail.ac4.yahoo.com with NNFMP; 13 Feb 2009 13:37:14 -0000
Received: from [127.0.0.1] by omp112.mail.ac4.yahoo.com with NNFMP; 13 Feb 2009 13:37:14 -0000
Received: (qmail 2072 invoked by uid 60001); 13 Feb 2009 13:37:13 -0000
Received: from [92.62.208.194] by web59409.mail.ac4.yahoo.com via HTTP; Fri, 13 Feb 2009 05:37:13 PST
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: [email protected].
yahoo.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=yahoo.com; s=s1024; t=1234532233; bh=6kXb6xTO3L7T3qS0tjC1Yvs1IpwZrz/k7QZfy4sGkfQ=;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=ENardu9y4higajacM93qGu2ziUOTblhaCImYXqyxaZf3O84kLhU8fbD
2q+iczmTSpvhIJvS3xi5w3XJLhD+jXoNvUK4iowO6ns/KBPDXSNT8Llk
DdHEi3XuMlpqtcjjv4ehFcIpHR+/RKr7rC/wguu11tAaquDcJ3epx0qC9r0M=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=ZPNn8GkU7IlSVY6H2cGBa8DcW35DTHLfjejAqJy+GgAK75drDzldv3l+
T0ANqQTzLRZ5L5vUp6rpIFYzpVcg+9lD8SJM4FEkVhim+o58fB2nrHq4c
ZP9m8VBsztVdqaxo42IdOmi8w7qhDNAQjYYDXw7y86WR5R/HMdTTxy
RywE=;
Message-ID: <[email protected]>
X-YMail-OSG: BY0GMs4VM1lo19DIaYjGpf2a1ZZ40qUZbhBXOBItd6uDOcb6vYeX42.Z
sW3kU2q0MclTWxNCTpON4GZz1lAif.WeCni4bCnx2kuQHQYCVxloD
Hlt5j9Uqa5p99Aoz.SlM.BeiGpTla2KKMf1m8Q9UU3f3GdsLcZPy5vRZ
1hqRUS5VmC0bCdTGsppTyKUFYUTQ8Nu0ZTc4lXs5xNuvHqiIL6SYP
KvyZtLgir_vTw2Pxc90HFZpdMRAso3P7KZgNhHDBFD
X-Mailer: YahooMailWebService/0.7.289.1
Date: Fri, 13 Feb 2009 05:37:13 -0800 (PST)
From: "[email protected]" <[email protected]>
Reply-To: [email protected]
Subject: PAYMENT NOTIFICATION TO AVOID MISTAKE
To: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-1076115495-1234532233=:95044"
X-Original-To: [email protected]
Return-Path: [email protected]
X-OriginalArrivalTime: 13 Feb 2009 13:37:24.0642 (UTC) FILETIME=[344CF820:01C98DE0]

Central Bank Of Nigeria
CENTRAL BANK OF NIGERIA
CENTRAL BUSINESS DISTRICT
CADASTRAL ZONE
LAGOS-NIGERIA
(OFFICE OF WIRE CREDITING PAYMENT TRANSFER DIVISION)

EXECUTIVE ORDER TO YOUR PAYMENT

101,TINUBU SQUARE,
VICTORIA ISLAND,
LAGOS-NIGERIA. web:

Our Ref: CBN/IRD/CBX/021/05 .

ATTENTION ; (my real first name)

Sir.

This is to officially inform you that this bank received payment instruction from the Nigerian Senate House Committee on Finance Appropriation and Foreign Debt Payment Contract Payment in-conjunction with the Presidency Federal Republic of Nigeria/the office of the Accountant General of the Federation to dully effect the release of your overdue contract payment this last days of President Olusegun Obasanjo's led administration schedule to come to an end on the 29th of last two years .
We regret the delay in responding to you as we have been given the Presidential approval to release your payment which was placed on hold for years in this country by some logistic problems.

With regards to the above instruction, from minister of finance wishes to advise you without any further delay to reconfirm to this bank your real banking particulars as we are not too sure the banking particulars which we received from the Nigerian Government your original banking information’s , we indulge sincere understanding of this message by giving us your real banking information to enable us commence your payment, this central bank will not be held responsible for any payment that is effected into any wrong account hence we notified you in advance.

Is this account below your real banking particulars? if not please reconfirm your real banking particulars where we can transfer your approved fund into, this account was sent us by the Nigerian Authorities and we are not too sure it represents your true banking information.
His Excellency musa ya’radua president of Nigeria how ever approve part payment for every contract. how ever apologize for all the years delayed. Is cost of bad government. he added after you confirm this part payment then the balance well proceed. You have been warned.

ABRAHAM ISREALI
COMPANY:AVS INTERNATINAL
COMMODITY TRADERS EXPORT& IMPORTERS
ADD:16 VINCENT COURT,BELL LANE,LONDON.ENGLAND NW4 2AN
BANK: PARITATE BANK
ADD:RIGA,LATVIA
SWIFT CODE:PRTTLV22
A/C NUMBER:267001124970

We advised you do this immediately so that your transfer will commence duly we have little time left to excite this payment.

Meanwhile, we wish to inform you that we have received all necessary papers to guide your transfer from the Nigeria Government.
MY CODE NUMBER ( I AM A BUSY MAN )
THANKS

Paul Johnson

CENTRAL BANK OF NIGERI

Posted: Fri Feb 13, 2009 11:57 pm

If you've ever typed your email address on a site they will copy it, and target you specifically. It's possible a merchants email list was accessed. More likely a friend of a friend CC'd you in on something and sent it out into the world. I get scams to my real addy as well. Not as many, but some have come back with 'Attention: Brad _________"

Also the lad forgot to BCC his victim list and shot himself in the foot. You can 'reply all' and tell your lad you know it's a scam. For what it's worth, but it will give you some comfort.

If you're interested in baiting, we can certainly help you out. Very Happy

Posted: Sat Feb 14, 2009 12:40 am

This is exactly why I want to pummel my non-IT-literate friends who forward me tacky emails chain letters - their stupid kind means my name (of the form "My Name" <email@address>) gets forwarded on by gullible idiots leading to exactly this scenario. Have they not learned their wish does not come true because they spammed their entire contact list with some stupid anigif with "mystical powers"?

Elite Baiter Joined: 19 Jan 2009 Posts: 1440

Ah, now I see what happened with the name thing. Thanks - it was really bugging me.

Posted: Sat Feb 14, 2009 3:21 pm

It's certainly nothing to worry about. It's a bad idea to bait scammers from a RL address, but just about every email address gets spam and scams.

419Eater is my life Joined: 27 Jan 2009 Posts: 479

manbiteslion wrote:

This is exactly why I want to pummel my non-IT-literate friends who forward me tacky emails chain letters - their stupid kind means my name (of the form "My Name" <email@address>) gets forwarded on by gullible idiots leading to exactly this scenario.

I autorespond to all "fwd" with a lecture about using my email address in BCC .. to hammer home use of bcc when sending to a group of people

eventually they use bcc or stop emailing me junk

win win

Two questions from a newb..	View next topic View previous topic