Thursday, 28 November 2013

NOT From NatWest - FW: Account On Hold

Typical phishing scam ....

Dear  (email address removed) 

Your password was entered incorrectly more than 5 times.

Because of that , our security team had to suspend your accounts and all the funds inside.
Your account access and the hold on your funds will be released as soon as you verify your information.

Review Your Account Activity

We are sorry for this inconvenience but this is a security measure which we must apply to ensure your account safety.
If you have already confirmed your information then please disregard this message

Thanks for choosing NatWest UK
NatWest Security Team
Copyright © 1999 - 2013 NatWest PLC. All rights reserved.

No virus found in this message.
Checked by AVG -
Version: 2013.0.3426 / Virus Database: 3629/6871 - Release Date: 11/27/13 
-----Original Message-----
From: NatWest []
Sent: 27 November 2013 15:36
To: email address removed
Subject: Account On Hold


Tuesday, 12 November 2013

NOT From Amazon - Please share

FW: Your order #261-5508270-8013475
We have had three of these today, two came with a little executable inside a zip file called "Order". It does not appear to be a virus but is almost guaranteed to compromise your computer somehow or send you to a fake Amazon site to get you to enter your details (phishing). We weren't prepared to find out and neither should you.
Tips on spotting a fake.......
If you look at the three email addresses below you will see that they are not from Amazon
The email does not contain a recipient's name - A good test from Amazon, eBay and PayPal - they always email using your name as it appears on their system, never 'Dear Customer' or in this case 'Good Afternoon'.
If you are suspicious, open a new browser window, type in the name of the site you're not sure about (don't copy and paste), make sure it's on a secure page (https://etc.... or with a Padlock symbol)  Log into your account and look in 'Messages'. If these sites are genuinely messaging you, there will be some reference to that fact in your online account.
Please Please Please Share these posts on facebook, twitter, Google+, LinkedIn or any other social networking sites, the more people that can spot these fakes, the better. Help stop the Scam emails.
The Original email..........

Good afternoon,

Thank you for your order. We’ll let you know once your item(s) have dispatched.You can view the status of your order or make changes to it by visiting Your Orders on

Order Details

Order #402-1818021-8651670 Placed on November 1, 2013

Order details and invoice in attached file.

Need to make changes to your order? Visit our Help page for more information and video guides.

We hope to see you again soon.


Order Details

Order #402-1818021-8651670 Placed on November 1, 2013

Order details and invoice in attached file.

Need to make changes to your order? Visit our Help page for more information and video guides.

We hope to see you again soon.

-----Original Message-----
Sent: 12 November 2013 09:18
Cc: *************************
Subject: Your order #261-5508270-8013475


Monday, 11 November 2013

Please share this SCAM - FW: PLEASE GET BACK SOON

Adding pictures to spam seems to be happening more often these days... here is a good example just in.
Note the quality of the portrait against the poor quality of the underlying scanned ID card. If youre goig to fake ID, at least get it done 'Professionally'... Oh and don't put another of your own email addresses in the 'To' field either, it's not cool!

How are you doing? Please do not be embarrassed about my unsolicited e-mail to you. I am in  need of your assistance, My name is Nicholas Hamilton,a West Point Graduate and a 1st Lieutenant in the US Army currently serving at the Engineering Unit of US Military here in Ba’qubah in Iraq; we have about $10.7 Million that we want to move out of the country. This money was found in two boxes some time ago during our routine raid around the base by me and Sgt David Scot. I need a good partner, someone I can trust to receive the funds on my behalf. You have nothing to be afraid of as the money is not illegal and I have a good worked out plans to get it to you. The most important thing is; “Can I Trust you”? Once the funds get to you, simply take out 20% as your share and keep the remaining 80% for me and my partner. Your own part of this deal is to find a safe place where the funds can be sent to, ours is  sending it to you safely.

If you are interested I will furnish you with more details upon receipt of your response and contact details. But I can assure you the whole process is simple and we must keep a low profile at all times. I look forward to your reply and co-operation.I have kept this money for so long but right now that President Barrack Obama is serious about moving us (the last  troop) out December 2013.I need to get this cash out ASAP.

I have attached my official military ID card for you to know me in person.

Lt. Nicholas Hamilton
-----Original Message-----From: LT. NICHOLAS HAMILTON []
Sent: 11 November 2013 16:16


She looks pretty!... FW: Vodafone MMS Service

And comes with her own Virus!! - a file called - DON'T open it

How is it going? I'm Marcella! i look for a second half.
I enjoy travelling and drawing! Look at my photos in attached file.
Answer me! Bye!

Mobile: +447*********
Passcode: 5019E123F8BC 
-----Original Message-----
From: Marcella []
Sent: 11 November 2013 07:59
To: ************
Subject: Vodafone MMS Service



Thursday, 7 November 2013

Another Nigerian Scam - FW: CHANGE OF BENEFICIARY

And it even says it's from Nigeria.... not very bright some of these scammers !!!


Attention: Sir,


This is very urgent and an urgent attention is needed.

In our office today, was a present of One Mr. John T. Kehoe of 1200
Fitch Way, Sacramento, Ca. 95864 filing application contrary to your
pending fund transfer. The above mentioned people visited this Bank
yesterday with a power of attorney given in his favor by your good self,
granting him the benefit to process and claim your inheritance of
$5,000,000.00(Five Million United States Dollars Only) for personal

He further Stated that the online account be Terminated while the fund 
should be wired to his Bank account with Bank Of America, Routing 
Number 121000358.Our office have ask Mr. John T. Kehoe return back to 
the Bank within 48hours to enable us have a personal confirmation from 
you being hitherto the beneficiary.

1. Did you instruct one Mr. John T. Kehoe of 1200 Fitch Way,
Sacramento, Ca. 95864,to claim and receive the payment on your behalf? 2. Did you sign any 'Deed of Assignment' in his favor thereby making
him the current beneficiary?

We are sorry to have delayed your instruction in giving out this fund
since we must adhere to the procedures of this honorable bank by making
sure this request is verified and confirmed by the beneficiary and his
existing attorney.

Your confirmation to the above will be appreciated. We look forward to
hearing from you soon via this email (

Yours sincerely,

Mr. Fred Wilson
Head of Operations.
Barclays Bank Plc
Tel: +234 80 2757 0226
-----Original Message-----
Sent: 06 November 2013 21:14
To: undisclosed-recipients:


Safe.... but still a scam! FW: FROM FEDERAL RESERVE BANK N.Y

All this email contains is a file called 'VIEW.txt' and the following ONE line... 
View  the Attachment 
 -----Original Message-----
From: B Bernanke []
Sent: 10 October 2013 02:01
To: undisclosed-recipients:

The text file 'VIEW.txt' is a safe file in that it does not contain malware, a virus or any other form of executable data.... it's just a basic phishing scam.
The contents of the file:-
33, Liberty Street, New York, NY 10038 USA.
Attention Beneficiary:
This is to inform you that we have on the 9th day of October,2013 received a payment credit instruction from the Central Bank Of Nigeria to credit your account with your full Inheritance fund of US$10.5Million.
However, you shall required to provide the followings datas below:
Full Name:
Bank Name:
Account No.:
Routing No.:
Swift Code:
Account Name:
Please do provide the above information accurately, because this office cannot afford to be held liable for any wrong transfer of funds or liability of funds credited into a ghost account.
Thanks for banking with Federal Reserve Bank New York while we looking forward to serving you with the best of our service.

Thanks and God bless you.
Yours in Service,

Mr.Ben Shalom Bernanke
Chairman Federal Reserve Board  New York

Saturday, 2 November 2013

Investment scam - FW: PROFITABLE INVESTMENT PROPOSAL...11/02/2013

Another twist on the 'phishing' scam......


Good day to you and your family, I got your email contact from Key2net email directory during my random internet search while looking for a reliable and trustworthy foreigner for assistance.I apologize if the content here under are contrary to your moral ethics but please treat with absolute secrecy and personal.My name is Engr. Dr. Ahmad Mualla from Damascus Syria. I am now 66 years Old, and i am now a retired government officials I was former personal investor & financial consultant advisers to some Top Politician in Syria, also an oil Tycoon from Syria and Saudi Arabia. Al Furat Petroleum Company (AFPC) the leader in the region in Reservoir Management AFPC was established under Service Contract no. 210 ratified by Law no. 43 of 1977 and named as per decree-law no.12 in 1985.

AFPC is a joint venture company between the General Petroleum Corporation (50%) and private shareholders Syria Shell Petroleum Development (SSPD) etc I have plan to relocate my investment planning to your beautiful country, out of Syria, Now that Syria security and our Economic independent has been lost to the greatest lower level, and our culture has been lost forever and our happiness has been taking away from us, i will like to relocate my family out from Syria, here in my country there is fire on the mountain, i need a foreign partner to enable me transport my investment capital and then relocate with my family, honestly, i wish you and i will discuss more and get along, i need a partner because i don't have any bank account outside Syria.Am interested in buying properties houses, Building real estate and some tourist places,I will appreciate your idea and knowledge regarding this or any other profitable investment you may suggest, on my next email i will explain to you !  the full details of this investmen

I shall tell you more about myself and my family on my next email, upon your respond, you may as well tell me little more about yourself.Kindly reply to my private email address at:

I'm waiting for your good responds.


Engr.Dr.Ahmad Mualla
Damascus Syria.

-----Original Message-----
From: Engr.Dr.Ahmad Mualla []
Sent: 02 November 2013 10:25
To: undisclosed-recipients:



Find us on Facebook