20190607_PHISHING_SCAM_1

Attention: Beneficiary


We are not sure you received our previous message but we wish to us this medium to officially inform you that following the ongoing review of all unclaimed and delayed funds by the United Nations and the World Bank, your payment file was forwarded to our office for immediate payment of your long delayed funds starting with a first transfer of US$10,000,000.00 with reference No. NG/FM14FGN, to your bank account.

However, we are surprised to receive another application this morning from your representative, MR.KRAUS MULLER,stating that you authorized him to transfer the funds to another bank account in Germany and that you were recently involved in an auto accident and cannot walk right now.


Could you please confirm immediately, your relationship with MR.KRAUS MULLER and also, confirm if the bank account in Germany as shown below is now your new bank account information to receive your funds this week from our paying bank

CREDIT SUISSE, D-80321 BREMEM,GERMANY
ACCOUNT NO: 098-11180933-109
IBAN: CH55 0910 3045 6011 91110 0
SWIFT CODE: AREZCHZZ8OU

Kindly get in touch with us today by email with your telephone number to confirm this information to avoid wrong transfer of your funds, so that we can proceed with the transfer of the US$10,000,000.00 to your correct bank account as scheduled.

Yours sincerely,
MRS.JUAN HENRY
Director,Anti-Fraud Unit.
Financial Services Regulation Committee
Plot 33,ATB Way Cadastral Zone,Abuja,NG




Received: from MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) by
 MBX05B-IAD3.mex08.mlsrvr.com (172.29.17.24) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Mailbox Transport; Fri, 7 Jun 2019 22:37:00 -0400
Received: from MBX04C-ORD1.mex08.mlsrvr.com (172.29.9.20) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3; Fri, 7 Jun 2019 21:36:59 -0500
Received: from gate.forward.smtp.ord1c.emailsrvr.com (108.166.43.128) by
 MBX04C-ORD1.mex08.mlsrvr.com (172.29.9.20) with Microsoft SMTP Server (TLS)
 id 15.0.1473.3 via Frontend Transport; Fri, 7 Jun 2019 21:36:59 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [37.220.26.157]
Authentication-Results: smtp10.gate.ord1c.rsapps.net; iprev=pass policy.iprev="37.220.26.157"; spf=neutral smtp.mailfrom="[email protected]" smtp.helo="mail.adclicki.ir"; dkim=none (message not signed) header.d=none; dmarc=none (p=nil; dis=none) header.from=test.com
X-Suspicious-Flag: NO
X-Classification-ID: 49a3ec5c-8996-11e9-9bf1-0026b954785f-1-1
Received: from [37.220.26.157] ([37.220.26.157:57655] helo=mail.adclicki.ir)
	by smtp10.gate.ord1c.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=DHE-RSA-AES256-GCM-SHA384)
	id F3/10-15995-B4F1BFC5; Fri, 07 Jun 2019 22:36:59 -0400
Received: from User (unknown [37.49.225.168])
	by mail.adclicki.ir (Postfix) with ESMTPA id C3AC77CE3B;
	Sat,  8 Jun 2019 02:34:49 +0000 (UTC)
Message-ID: <[email protected]>
Reply-To: <[email protected]>

Also uses these:
[email protected]
[email protected]
[email protected]

From: Mrs.Juan <[email protected]>
Subject: Attention: Beneficiary
Date: Fri, 7 Jun 2019 19:35:09 -0700
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: Undisclosed recipients:;
X-MS-Exchange-Organization-Network-Message-Id: 462eea2f-4914-44bd-09fc-08d6ebba2e55
X-MS-Exchange-Organization-AVStamp-Mailbox: SMEXzs^g;1515700;0;This mail has
 been scanned by Trend Micro ScanMail for Microsoft Exchange;
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX04C-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit