From: "Mr. Rabiu Adamu"<eifo@sfs.com>
Reply: <office439@zoho.com>
Date: Sat, 8 Oct 2016 19:09:43 +0700
Subject: Re: International Funds Recovery
FROM: MR. RABIU ADAMU.
International Funds Recovery and Management Agency.
Good Day,
I am pleased to inform you that following this year’s (2016) review of the global financial matters and just concluded investigations by the Central Intelligence Agency (CIA) in conjunction with the ECONOMIC AND FINANCIAL CRIME COMMISSION (EFCC), it is revealed that your email is among the list of people who are victims of scam.
In view of the foregoing, a new payment of US$1.500,000.00 has been Approved in your favor as a compensation to the money you have lost in the hands of scammers and it will be credited into an ATM CARD which will be delivered to you upon your response or transferred into your bank account through our accredited paying bank.
Note: Thousands of fraudsters have been using this method in scamming most foreign creditors that we have in the payment list here in our office. We use this medium to inform you that any email that do not come with the new communication code: NG/-HFCR-/RLPHJ/016 is false. In this case, youâre advised not to respond to any email that does not come with the above communication code for safety purpose.
Our final conclusion was that, the fund should be paid to you via an Automated Teller Machine Card (ATM Card) as it seems OR through bank wire transfer depends on your choice of payment, this will be easier and faster for you to receive your Compensation payment with immediate effect.
Meanwhile, I received a power of attorney from one Mr. Cambell Willie from U.S.A purportedly issued by you asking us to change the fund beneficiary to his name and have the fund transferred to him, you are therefore expected to respond to this email and confirm if the power of attorney is truely from you.
You are also required to confirm/complete the below details for proper verification and documentation.
1. Full Names
2. Residence address
3. Telephone/Fax number
4. Age
5. Next of Kin
6. Country of Residence
Thanks.
Yours Faithfully,
Mr. Rabiu Adamu
Chairman Compensation Committee
Technical Analysis
The time zones from this Email (GMT+7) indicates a Thailand origin, verified by the use of asia.net.co.th as their Internet Provider.
They have used Outlook Express 6, which would be running on Windows XP. They have it configured to use their eifo@sfs.com account – sfs.com is a fee Email service. However, they are sending the spam emails utilising an open relay at solunic.com. They have also configured a reply address of office439@zoho.com, which will be their actual account for retrieving their victims Emails. It is another free Email.
This Email does contain a mixture of scam types. A loaded ATM card, which is a compensation payment, and they add the fact that someone is already after it! This is a rouse to make the victim reply quickly.
I needed the business