Those who have followed my meanderings over the last year
know that I have a special place in my heart—not to mention a very special
place in Hell—for Internet scammers. Most of the time, their poorly-worded
little bombshells are caught by my spam filters, but sometimes they manage to worm
their way through into the actual Inbox. I received the following over the past
couple of days so I thought I would share them with you. They are not all by
any means, but they are quite representative. There are the mundane, the
cleaver and one—my personal favorite—that should have every Soldier, Marine,
Sailor and Airman in this country’s armed forces sufficiently ticked off to
hunt them down. One word of warning: Do not click on any links in the following
examples. I have left them active so you can mouse-over them and see that
they are, in fact, fakes. So, without further a due, enter the scammers!
The Bank Scam
Here we have two examples of a pretty basic bank scam. The
tactic is pretty straightforward in that you are asked for account and/or
personal information for some legitimate-sounding reason. Here is one that is
supposed to be from the Royal Bank of Canada:
Dear Sir/Madam,
RBC Financial Group always looks forward for the high security of our
clients. Some customers have been receiving an email claiming to be
from RBC Financial Group advising them to follow a link to what appear
to be a RBC Financial Group web site, where they are prompted to enter
their personal Online Banking details. RBC Financial Group is in no
way involved with this email and the web site does not belong to us.
RBC Financial Group is proud to announce about their new updated secure system.
We updated our new SSL servers to give our customers a better, fast
and secure online banking service.
Due to the recent update of the servers, you are requested to please
update your account info at the following link.
https://www1.royalbank.com/cgi-bin/rbaccess/rbunxcgi?
RBC Financial Group
Security Advisor
RBC Financial Group
Click the link to update your account information. How
convenient! The bank wants to make things as easy as possible for me to take
care of my information update! Three problems: Banks don’t do this sort of thing; the link, which is made to look like
it goes to the Royal Bank, actually goes somewhere else; and I don’t have an
account with this bank. Another tip-off is the fact that banks, like most
professional organizations, don’t use
fonts that look as if they were hand-written. One interesting feature is
that the footer of the email (not shown) contains a link to a fake Royal Bank
of Canada Internet security page with advice on Internet safety. Don’t you love
a scammer with a sense of irony?
The same advice regarding the misdirected link applies to
this somewhat more threatening notice supposedly from Sterling Bank:
You have 1 new ALERT message
Please update your Sterling Bank account
Your Internet Banking Account is currently locked.
To Login, please click the link below:
Sterling Bank Online
Banking
© Copyright 2009 Sterling Bank. All
rights reserved.
Again, I have no association with the Houston-based Sterling
Bank, so that raises suspicions right off the bat. However, when I take a look
at townandcountry.net, the website that the link points to, I get a real estate
company in Florida.
Well, at least the typeface is professional.
Lottery Scams
There is an old joke that goes something like this:
An old man named Joe
wanted to win the lottery, so he prayed each and every day, morning and night,
asking God to let him win the lottery. The big day for the drawing came and
poor Joe, who wore out the knees of his trousers praying to win, lost.
He screamed at the
heavens, demanding to know why God failed to answer his prayers. The clouds
parted and God answered: “Joe, buy a ticket!”
What does that have to do with scams? If you don’t enter,
you cannot win. I mean, if I won all the fake lotteries that say I won, I would
be so fabulously well-to-do that I might start getting invitations to swanky Hollywood and Washington
parties. Alas, I never bought a ticket in any Netherlands E-Lottery, and yet,
it seems, that I have once again come out the winner:
RE: E-LOTTERY CASH PRIZE FOR E-MAIL USERS,
Dear Internet User
WINNING NOTIFICATION FOR 2009 CATEGORY "A" WINNER ONLY
Global Trust E- lottery Organization in the Netherlands is an accredited by
associated software manufacturers to conduct e-mail lottery for Internet users
all over the world. The essence of the program is to compensate e-mail users
world wide for the time and money they spend using the Internet. An online
automated random computer draw was made on e-mails addresses on various domains
online and I am pleased to inform you on behalf of Global Trust E- lottery
Organization in The Netherlands that your e-mail address and other 24, 000
e-mail addresses emerged as winners in the category "A". You and
24,000 e-mail owners worldwide have therefore respectively won a cash prize of
$2,500,000.00. (Two Million Five Hundred Thousand United States Dollars).
Your cash prize has been insured with your e-mail address with the
following numbers attached Ref Number: PW 9590ES 9414, Batch Number:
573881545-NL/2009 and will be transferred to you upon meeting our statutory
requirements and our verification that you are the rightful owner of the
winning e-mail address. To file in for the processing of your prize winnings,
you are advised to send to our Certified and Accredited claims agent for
category "A" the following information: Your full
Names:
Home and mobile Telephone number:
Nationality:
Country of Residence
Sex
Age:
Occupation:
NOTE:
All winnings must be claimed not later than two weeks, thereafter unclaimed
funds would be included in the next draw for 2010. You are to keep all lotto
information confidential, especially your reference numbers. (This is important
because if some else who is not you provide us with these numbers and claims
your money, we will not be liable). Further, should you be not interested in
collecting your money, please send you contact agent an email of decline so
that he proceed with official disqualification of your winning.
Contact Agent:
Name: Anders Lammers
Tel : +31-626-403-076
Fax: +31-847-134-491
E-mail: andersca12@yahoo.cn
CONGRATULATIONS ONCE MORE AND THANK YOU FOR USING THE INTERNET.
Yours Faithfully,
Regina Cassidy.
Lottery Coordinator.
At least I can be scammed by a live person over the phone.
Email is such an impersonal way to steal people’s money, don’t you think? By
the way, why would the agent you are supposed to contact in the Netherlandshave
a Chinese email account but Netherlands
phone numbers? Also, if this is an official person, why the anonymous Yahoo account? Just asking.
Another example:
EURO MILLION SPANISH LOTTERY INTERNATIONAL.
FROM: VICE PRESIDENT
INTERNATIONAL PROMOTION/PRIZE AWARD DEPT.
REFERENCE:67/80/ESP
BATCH:ESP-541-623-782
DATE:12THOf JAN 2009
Email:infomtgclaims@aim.com
Email:infomtgclaims@gmail.com
RE: WINNING NOTIFICATION / FINAL NOTICE Sir/Madam We are pleased to inform
you of the result of the Euro Million Spanish Lottery Winners International
E-mail programs held on the 1st Of Jan 2009. Your E-mail address attached to
ticket number 653-908-321-675 with serial main number 345-790-241-671 which
consequently won in the 2nd category, you have therefore been approved for a
lump sum pay out of 1.000.000.00 Euro.(One Million Euro) CONGRATULATIONS!!!
Due to mix up of some numbers and names, we ask that you keep your winning
information confidential until your claims have been processed and your money
remitted to you. This is part of our security protocol to avoid double claiming
and unwarranted abuse of this program by some participants. All participants
were selected through a computer ballot system drawn from over 100,000 company
and 50,000,000 individual email addresses and names from all over the world.
This lottery was promoted and sponsored by Spanish European Lottery Board
in conjunction with all international world organization such as (UNITED
NATION, UNICEF, NESCO, W.H.O E.T.C in order to enhance and promote the use of
Internet Explorer Users and Microsoft-wares around the globe. This promotional
program takes place every three year.
*************************************************************
To file for your claim, please contact our fiducially Agent:Dr.Williams
Garcia (GARCIA SECURITY COMPANY SPAIN)
TEL:0034-634-153-632
Email:infomtgclaims@aim.com OR infomtgclaims@gmail.com
**********************************************************
Please Remember to complete the verification form below, As all winning must
be claimed as soon you have been notified, Due to the deadline given by the
lottery board, As all unclaimed funds will be included in the next stake.
Please note in order to avoid unnecessary delays and complications please
remember to quote your reference number and batch numbers in all
correspondence.
Congratulations once more from our members of staff and thank you for being
part of our promotional program.
Note: Anybody under the age of 18 is automatically disqualified.
Sincerely yours,
Mrs, Comfort Jose
Lottery Coordinator
=============================================================
this message is CONFIDENTIAL. It may also be privileged or otherwise
protected by work product immunity or other legal rules. If you have received
it please let us know by reply it from your system; you should not copy it or
disclose its contents to anyone. All messages sent to and from Garcia Security
Company SL may be monitored to ensure compliance with internal policies and to
protect your winning from the Euro Million Spanish Lottery Award Promotion. our
e-mail transmission and correspondence are 100% protected by our Secured Socket
Layer (SSL) server The contents of any email addressed to our clients are
subject to our usual terms of business; anything which does not relate to the
official business of the firm is neither given nor endorsed by it.
VERIFICATION FORM
============================================================
1.FULL NAME:…………….2.ADDRESS:…………………………
3.MARITAL TATUS:…………4.OCCUPATION:………………………….
5.AGE:…………6)SEX:…………
7.NATIONALITY:…………8.COUNTRY OF RESIDENCE:……….
9.TELEPHONE NUMBER:……….
MOBILE NUMBER……………10.FAX NUMBER:…………………
11.BATCH NUMBER :…………12.REFERENCE NUMBER:………..
13. ALTERNATIVE EMAIL ADDRESS IF ANY:…………..
Copyright
© 1994-2009The Euro Millions Lottery S.L All rights reserved. Terms
of Service - Guideline.
Talk about dense, fine-print style text! That is a tool.
They know you don’t want to read all of it so they bury certain keywords that
will pop out at you as you scan the text. Words like Congratulations, Winning
Notice, Confidential, all
pop-out. The sender wants you to feel good, get excited, feel safe—all without
reading the whole email. If you did that, after all, you might begin to think
about things and they cannot have that. I have just finished reading it and all
I can say is Wow! Apparently, I am to get a million Euros from Microsoft and
the UN! Lucky me!
Cue the Trojan Horse
Here is something that is just nasty: a fake greeting card
notice. Once you click the link to pick up what you think is an e-card from
someone you know, it tries to infect your machine with a virus. The virus, a
fairly common Trojan is easily quarantined by Norton Antivirus but still, do
not click the link!
You have
recieved A Hallmark E-Card.
Hello!
You have recieved a Hallmark E-Card.
To see it, click here,
There's something special about that E-Card feeling. We invite you to make a
friend's day and send one.
Hope to see you soon,
Your friends at Hallmark
Your privacy is our priority. Click the "Privacy and Security" link
at the bottom of this E-mail to view our policy,
The real clue here is that the two links go to different
places and that the one that will infect your computer is blocked and only
gives an IP address when you mouse over it. That would not be the case if this
was legitimate.
419 Scams
Named after the section of the Nigerian penal code that
deals with fraud schemes, 419 Scams (aka Nigerian scams) are, in many ways, the
most terrible, since the scammer wants to establish some level of relationship
with you in order to milk you for as much money as they can. They can also be
the most fun since you have the opportunity to scam your scammer—out of their
time, out of their dignity and yes, sometimes, out of their money.
You have to remember a couple of things. First and foremost,
if what they are suggesting to you is in any way true, then you will be
engaging in criminal activity by going along with it. You are no longer a
victim of the scam, you are an accomplice. Second is that these are dangerous
people—in person—but they really don’t know who you are or where you are. They
fire off thousands of these emails and hope to hook a few suckers.
Let’s have a look at some of the 419 Scam messages that just
came in:
Dear
I Really needs you to stand as next of kin as who own this money in
the bank where i am working. I am Mr david john I will furnish you
with all the vital information's regarded to the money.
thanks
david john
As short and sweet as this is, David has pretty much summed
up how to pick out these emails. Here is the rundown:
No salutation
. This just shows that it was not sent to anyone
directly, but just scattered around the Internet.
Poor English Mechanics
. Capitalization, spacing,
punctuation—they are all wrong—a sure sign. You would think someone named David
John could do better.
Request for Help
. They all want your help to one degree or
another in exchange for great wealth.
Now, here is another one that is a bit more complex:
FROM: MR. Patrick
K. W. Chan
(Executive
Director & Chief financial Officer) Hang Seng Bank Limited
83 Des Voeux Road
, Central
Hong Kong SAR
FOR YOUR SPECIAL
ATTENTION
It is
understandable that you might be a little bit apprehensive because you do not
know me but I have a lucrative business proposal of mutual interest to share
with you. I got your reference in my search for someone who suits my proposed
business relationship.
I am Mr. Patrick
K. W. Chan Executive Director & Chief financial Officer of Hang Seng Bank
Ltd. I have an obscured business suggestion for you. I will need you to assist
me in executing a business project from Hong Kong
to your country. It involves the transfer of a large sum of money. Everything
concerning this transaction shall be legally done without hitch. Please
endeavour to observe utmost discretion in all matters concerning this issue.
Once the funds
have been successfully transferred into your account, we shall share in the
ratio to be agreed by both of us
I will prefer you
reach me on my private email address below (kwchan_patrick@yahoo.com.hk or
patrickchanhsb@gmail.com) and finally after that I shall furnish you with more
information's about this operation.
Please if you are
not interested delete this email and do not hunt me because I am putting my
career and the life of my family at stake with this venture. Although nothing
ventured is nothing gained.
Your earliest
response to this letter will be appreciated.
Kind Regards,
Mr. Patrick K. W.Chan
Very professional, don’t you think? The spelling is better
and this guy can effectively use punctuation and capitalization. Again we have
the request for help from someone unknown who wants to transfer a large amount
of money, which he plans to share.
What makes it interesting is that a little research shows
Mr. Chan to be a real person. The scammer is, therefore, impersonating him.
That is a pretty safe bet since the odds of a bank director doing something
like this is, to say the least, remote. My response? Assuming that the real Mr.
Chan would like to know his name is being dragged through Internet mud, I
contacted the bank and told them all about it. True, this isn’t what our fake
Mr Chan wanted, but as he said, “Nothing ventured, nothing gained.”
Speaking of which, here is the one that should have all our
military men and women up in arms:
Hello Pal,
Top of the day to you as I hope my e-mail meets you well. My name is Joey
Jones. (Sgt). I work here in Ba'qubah, Iraq as a military attache with the
United States Army's engineering unit. Myself and a colleague have about $2.3
million USD. We found this money during a raid on insurgents in Al Fallujah and
later discovered that it was from part of the loots meant to fund the
insurgencies here in Iraq .
We long had this money lodged some were around Jordan, and now we need to
move it out of the country. My colleague and I need a good partner someone we can
trust to actualise this project. The money is presently safe were we lodged it
for secured purpose. Since one can't send such money through the banks here
without raising so much dust, we need your support and assistance in this
regard. We are moving it through diplomatic means to your nominated location
and address directly or a safe and secured place of your choice using
diplomatic courier service.
But can we trust you? Once the funds get to you, you take your 40% out and
keep our 60%. Your role in this project is to find a safe place where the funds
can be shipped to and received. Our part is sending it smoothly to your
nominated location.
If you are interested I will furnish you with more details and you can
contact me on my email address: sgtjones75@gmail.com
or sgtjones75@aol.com
Awaiting your urgent response,
Your Buddy.
Sgt. Joey Jones
Our honorable men and women in uniform have it tough enough
without some criminal like this dragging their good name through the mud. The
last thing they deserve is to be used like this. For that reason alone I want
to see this guy found and put out of business. That aside, however, this is a
pretty good example of how far these criminals are willing to go to hook you.
Thanks to an email trace, we know that this guy is sending his scam message
from place called Vestal, New York.
Yep, we have home-grown scammers as well as the international variety. You can
see the generic salutation, the odd way he refers to himself and his unit
(calls his military service into question), the request for assistance and the
email addresses that are different from the one he used to send the email. That
leads to a legitimate military website (though not an official one).
The Bottom Line
As legitimate income continues to be threatened by the
recession and Washington’s
ham-handed attempts to deal with it, more and more of these scams will be
coming through the ether and settling into your Inbox. It is inevitable, but
you don’t have to be a victim. It is pretty simple:
·
If you didn’t buy a ticket, you didn’t win the
lottery.
·
If you don’t have an account with a given bank,
they don’t need to update your account.
·
If you do have an account, they won’t ask you
for information via email.
·
If it looks like it was written by a
grade-schooler, it isn’t legitimate.
·
If someone you don’t know wants you to receive a
transfer of money, it is a scam.
·
If it is for real, you become a criminal by
complying.
·
If you get an e-card, make sure the links go
where they should before you click!
If you are unsure if a person or company is real, Google
them. If you want to trace an email that you received, visit http://www.ip-adress.com, they have all
sorts of tools to help you. In any case, make sure your computer defenses are
up to scratch.
Most of all, remember that there is no such thing as money for nothing and no one who emails you out of the blue wants to give you money. Be a
skeptic, be safe.
If you enjoyed this post, please consider leaving a comment or subscribing to our free newsletter to receive future articles and information delivered directly to your email inbox.