20190617_PHISHING_SCAM_1

Attention: Beneficiary


We are not sure you received our previous message but we wish to us this medium to officially inform you that following the ongoing review of all unclaimed and delayed funds by the United Nations and the World Bank, your payment file was forwarded to our office for immediate payment of your long delayed funds starting with a first transfer of US$10,000,000.00 with reference No. NG/FM14FGN, to your bank account.

However, we are surprised to receive another application this morning from your representative, MR.KRAUS MULLER,stating that you authorized him to transfer the funds to another bank account in Germany and that you were recently involved in an auto accident and cannot walk right now.


Could you please confirm immediately, your relationship with MR.KRAUS MULLER and also, confirm if the bank account in Germany as shown below is now your new bank account information to receive your funds this week from our paying bank

CREDIT SUISSE, D-80321 BREMEM,GERMANY
ACCOUNT NO: 098-11180933-109
IBAN: CH55 0910 3045 6011 91110 0
SWIFT CODE: AREZCHZZ8OU

Kindly get in touch with us today by email with your telephone number to confirm this information to avoid wrong transfer of your funds, so that we can proceed with the transfer of the US$10,000,000.00 to your correct bank account as scheduled.

Yours sincerely,
MRS.JUAN HENRY
Director,Anti-Fraud Unit.
Financial Services Regulation Committee
Plot 33,ATB Way Cadastral Zone,Abuja,NG





Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Mailbox Transport; Mon, 17 Jun 2019 21:25:55 -0500
Received: from MBX07C-ORD1.mex08.mlsrvr.com (172.29.9.29) by
 MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3; Mon, 17 Jun 2019 21:25:55 -0500
Received: from gate.forward.smtp.ord1d.emailsrvr.com (161.47.34.7) by
 MBX07C-ORD1.mex08.mlsrvr.com (172.29.9.29) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Frontend Transport; Mon, 17 Jun 2019 21:25:55 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [78.155.197.115]
Authentication-Results: smtp2.gate.ord1d.rsapps.net; iprev=pass policy.iprev="78.155.197.115"; spf=neutral smtp.mailfrom="[email protected]" smtp.helo="mail.popolochkam.pro"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=test.com
X-Suspicious-Flag: NO
X-Classification-ID: 660a30fe-9170-11e9-b540-5254004a0287-1-1
Received: from [78.155.197.115] ([78.155.197.115:59530] helo=mail.popolochkam.pro)
	by smtp2.gate.ord1d.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
	id 09/2F-09307-3BB480D5; Mon, 17 Jun 2019 22:25:55 -0400
Received: from [37.49.225.168]
	by mail.popolochkam.pro with esmtp (Exim 4.89)
	(envelope-from <[email protected]>)
	id 1hcU0E-00016O-JP; Sun, 16 Jun 2019 12:11:20 +0000
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Description: Mail message body
Subject: Attention: Beneficiary
To: Recipients <[email protected]>
From: <Juan [email protected]>
Date: Sun, 16 Jun 2019 05:11:14 -0700
Reply-To: <[email protected]>
X-MS-Exchange-Organization-Network-Message-Id: 9f03ebb4-b523-4dde-8ce2-08d6f3944b00
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1517900;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX07C-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit