Fake FBI Email from Shutterfly - Scamalot

Seen a Scammer? Report Them!

Seen a scammer? Been caught out? Let the world know so they don't get burned. Add information if you see one that's already been logged - scammers move quickly and change details often to avoid detection. Details you log here will be in major search engines within an hour or two.

Please Like, Share, Tweet etc. to spread the word.
Scam Report Type: at  
Scam ReporterScam Tips Received
Robert M Boughton
Albuquerque, NM, United States
2016-03-29 19:23:27
Social Network Scam
+1 Fake FBI Email from ShutterflyEmail Attached  
 Scammer
  Information
Name:
   fred n
Email Address:
   fbifbius11@yeah.net
Aliases:
   MR.JAMES B. COMEY JR. (FBI Director General)
Scam Website:
    https://shareemail.shutterfly.com/#%3aemid%3dsite_share%26cid%3dSHARE3SXXXX
Telephone:
   (224) 938 1106
I can't tell what it is except that it's from someone with an apparent Shutterfly do not reply email. He pretends to be from the FBI and mentions the name of FBI Director James Comey. I'm not about to click on the link they want me to go to! Read text and headers-footers of email below.

FEDERAL BUREAU OF INVESTIGATION, 26 Federal Plaza, 23rd Floor New York, NY 10278-0004, Hi, this email is from email department of US Dept of Federal bureau of investigation (FBI) Washington, DC., We believe you received the previous message we sent to you prior to your dealings with the U.S Custom Authority at (JFK) John F. Kennedy International Airport New York as regards to your over-due contract payment in a consignment trunk box worth $8,000.000.00 (Eight million dollars only) which was endorsed in your favor, like we stated earlier we have dully screened through this project as stipulated on our protocols of operation and have finally confirmed that your contract payment is 100% genuine and hitch free from all ilegal which you have the lawful right to claim your fund without any further delay.I, Mr. James B. Comey Jr. Director-FBI is hereby announcing to you that your $8Million was received at JFK airport since and every necessary fees/charges has been paid by government of country origin except $75 for Custom Clearance Certificate CCC, but a Lady Mrs Jane Frederick came forward claimed you sent her to claim your $8Million as your next of kin/representative, is it true? Did you order her to pay $75 for (CCC)? Also be informed that we came to an agreement with the U.S Custom Authority at (JFK) John F. Kennedy Int'l Airport NYC that you will send $75 latest tomorrow morning. FOR MORE INFORMATION OR DETAILS ABOUT YOUR $8MILLION,Please contact FBI Director= James Brien Comey Jr direct at his private contact details below. Addrss:26 Federal Plaza, 23rd Floor New York, NY 10278-0004Name: MR.JAMES B. COMEY JR. (FBI Director General). Email: fbifbius11@yeah.net , Phone:(224) 938 1106, While contacting FBI Director=James Brien Comey Jr direct at his private ( fbifbius11@yeah.net ) for more details RECONFIRM YOUR BELOW INFORMATION AGAIN TO AVOID MISTAKE OR WRONG DELIVERING.Your full names,Your mobile/home/office phone,Your home address,Your Country,Your City,Your Occupation and position,Your age and gender, Thanks and have a nice day.Yours in service,FBI Email Department.

Headers & Footers
Received: from DM2PR11MB0073.namprd11.prod.outlook.com (10.160.28.18) by
BLUPR11MB0068.namprd11.prod.outlook.com (10.160.37.17) with Microsoft SMTP
Server (TLS) id 15.1.443.12 via Mailbox Transport; Mon, 28 Mar 2016 09:20:28
+0000
Received: from BN3PR11CA0036.namprd11.prod.outlook.com (10.162.169.46) by
DM2PR11MB0073.namprd11.prod.outlook.com (10.160.28.18) with Microsoft SMTP
Server (TLS) id 15.1.443.12; Mon, 28 Mar 2016 09:20:27 +0000
Received: from CY1NAM02FT037.eop-nam02.prod.protection.outlook.com
(2a01:111:f400:7e45::201) by BN3PR11CA0036.outlook.office365.com
(2a01:111:e400:51e4::46) with Microsoft SMTP Server (TLS) id 15.1.447.15 via
Frontend Transport; Mon, 28 Mar 2016 09:20:26 +0000
Received: from SNT004-MC3F29.hotmail.com (10.152.74.51) by
CY1NAM02FT037.mail.protection.outlook.com (10.152.75.77) with Microsoft SMTP
Server (TLS) id 15.1.453.6 via Frontend Transport; Mon, 28 Mar 2016 09:20:26
+0000
Received: from shutterfly.com ([136.179.236.38]) by SNT004-MC3F29.hotmail.com with Microsoft SMTPSVC(7.5.7601.23143);
Mon, 28 Mar 2016 02:20:26 -0700
Received: from mail.sfly.com (unknown [172.18.128.195])
by shutterfly.com (Postfix) with ESMTP id BE9973C2370
for ; Mon, 28 Mar 2016 02:20:25 -0700 (PDT)
Received: from mail pickup service by mail.sfly.com with Microsoft SMTPSVC;
Mon, 28 Mar 2016 02:18:29 -0700
From: fred n
Sender:
To:
Reply-To: fred n
Subject: FEDERAL BUREAU OF INVESTIGATION
Date: Mon, 28 Mar 2016 02:18:25 -0700
X-Sfly-AttachmentSize: 0
X-Mailer: Sfly
X-Sfly-IsPartial: False
X-Sfly-Kind: SendSiteNotify
X-Sfly-Site: shareemail
X-Sfly-MsgHash: 9eb42c32f16bb7fde33eb11eee8d0bc5
MIME-Version: 1.0
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Message-ID:
X-OriginalArrivalTime: 28 Mar 2016 09:18:29.0587 (UTC) FILETIME=[CAB5B230:01D188D2]
Return-Path: noreply@sfly.com
X-MS-Exchange-Organization-Network-Message-Id: 0acb091c-7775-461d-a77f-08d356ea330d
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
CMM-sender-ip: 136.179.236.38
CMM-sending-ip: 136.179.236.38
CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is
136.179.236.38; identity alignment result is pass and alignment mode is
relaxed) smtp.mailfrom=noreply@sfly.com; dkim=none (identity alignment result
is pass and alignment mode is relaxed) header.d=sfly.com; x-hmca=pass
header.id=noreply@sfly.com
CMM-X-SID-PRA: noreply@sfly.com
CMM-X-AUTH-Result: PASS
CMM-X-SID-Result: PASS
CMM-X-Message-Status: n:n
CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0xO0Q9MTtHRD0xO1NDTD0w
CMM-X-Message-Info: NhFq/7gR1vTyjJ76NbiPeX1XVnA0sMjhjgBQ3t65s01LI/LqGoR1m0ezUanB3BPfXmyVYXH7GSESOii0BUGrk4ZaxBxc/csLaswCR/++wjnjNSHehreRfHg/PliSYUPbW3GmN84nwVvlks6U7JVa3uNmkg7u8ULUDM16o4MYjIat4+k6CyqrNyWWFB5tjK2KbtQGLUE83CJzl0MHEw676f1E8aLO+ks1Oas5eePzjUM4YAeG6gItrA==
X-MS-Exchange-Organization-PCL: 2
X-Forefront-Antispam-Report: EFV:NLI;SFV:NSPM;SFS:(98900003);DIR:INB;SFP:;SCL:1;SRVR:DM2PR11MB0073;H:SNT004-MC3F29.hotmail.com;FPR:;SPF:None;MLV:ovrspm;LANG:en;
X-MS-Office365-Filtering-Correlation-Id: 0acb091c-7775-461d-a77f-08d356ea330d
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(8291501002);SRVR:DM2PR11MB0073;
X-MS-Exchange-Organization-AVStamp-Service: 1.0
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(82015046);SRVR:DM2PR11MB0073;BCL:0;PCL:0;RULEID:;SRVR:DM2PR11MB0073;
X-MS-Exchange-Organization-SCL: 1
SpamDiagnosticOutput: 1:23
SpamDiagnosticMetadata: NSPM
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 28 Mar 2016 09:20:26.4490
(UTC)
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR11MB0073
X-MS-Exchange-Organization-AuthSource: CY1NAM02FT037.eop-nam02.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.7280098
X-Microsoft-AntiSpam-Mailbox:
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:I;WIMS-SenderIP:136.179.236.38;WIMS-SPF:sfly%2ec;WIMS-DKIM:sfly%2ec;WIMS-822:noreply%40sfly%2ecom;WIMS-PRA:noreply%40sfly%2ecom;WIMS-AUTH:PASS;ENG:(102400050);
X-Microsoft-Exchange-Diagnostics:
1;DM2PR11MB0073;2:glrmXMg4m0CL3FzvNDajAz249Cc430V3OxWtoPZ8dKnFXQpLeqvpp0RHYGexmMiio1mSEIkJtnTZVbQdTrm+UN3vJXiv03TF6Pe0Ej95F58neDAMvBBLKC1gAKNNyNKS0pCY3381emVFaSjN81skuTvQzWq3nPQdqoz+sYjGKQ91qOWY/oZukT8Hii4ZRmaTd3vd+fNWa09u2TJvIFa0vw==;3:Z45vuzMbfHi+guD14I5l00yB418LRK8f/0DKflC7DxPhf9vB5I9xMjf+ML8mzjtf3nhbFrpaEQgq5NnkIkcD/mRfkdVi4M8ACwWIsmEXVbTJ6wXVNvCx7sCH+nDrtAGw+/nEhWfPK8hfQ1UAWHDtKkfzIphOBBBTE2ByuLjg8ng=;25:wjT1TekOoP/VZX0KoqNxKUqfyXjhhpe5X1bVlWWQSry2M9sjBS9flHrQAD0MthJQxdDyM724Bt6d8/heooZFzf1u3xZ2xj+z7qxd/CSm/Xn8pDb7+KeUl9gEoPcLzFgfLrMzBerFclhvuaqnIOb7ZGXJ1I70b+hNEEiSb2Z0VybjK2ONqoR5HusUzMMYsEHpugYHJfMVU207MWj307tMDMFKSMwxh0QMsLSWmZHlrdArz4T756cZbSX24gQqPD40hRxdDaAMUOfpti+I8RBX3A==;4:Kpo2BqT4BVRCesn5S1ae928QuyDoU0R8uClOBsjk2kBhcLB71NYQbbamp5v8aWQVPL0/BAnyWzciOY1ZTHM2uRhDI3PghAr4qdP/ec27UzPqVOcrucEqM/u4/LJBJJKMyt5m79iX1GxQT/dxjYlexejy0aRhUKGv0HqLBID/kdk6Lfx3OA9ZPCCBShSSgIRhh12+OWTH2ukwA85g3lV0Ee26gf2K0xpNoLTd7rJk3SkCsf3MMYZiv/B/mivPL4p9nNcui0ohIvN6YBIJ3VJg9g==
X-Microsoft-Exchange-Diagnostics:
1;DM2PR11MB0073;23:49yPC5t6lJceJnb3hHEYK2hnyMVMKn3Cu4YgC3VufExKhgbkJP7snUawWlZHbnth3pUbGUXO1xw+KeZmKuTZrxugNEtOQamhxIT6WYSqIT+vdO+FqfYKiOKxpS9mW72J06dmQMWLXHL/p9jeW8nR5dJE4S35RKOPVrwbMy5Vkzgs8xTIec6G77+JW9YGaHqG;5:n4TSygOq0SznHPggkM0P0gWlWqPloPQSddcIWVzzJrzTzH0getOL8dCDY00HaDPHLLIfmz3mEV3Fh92HFuw3VzL3Rd5T0BrekqekbVdnph5SR34VmCFve7r8CcL3YvSvtU+G2bQN4WJ/u9lXdsLHEA==;24:f/GHsBDpEupUtEvSICWmgBgX0E83xKVa1LLZiKquiUmGTDB61DpxKdouotMNmMW4wK5DBb+diA1kqvSs1TnEfLR23PPnWE+fphpuYwykh58=
X-Microsoft-Exchange-Diagnostics:
1;BLUPR11MB0068;9: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
Follow Ups/Extra Information. Most recent is listed first.
No Name   (Medina, OH, United States) Added the following extra information on :2016-03-29 20:26:29
 Scammer
  Information
I HAVE GOTTEN THAT SAME EMAIL AT LEAST TWICE A WEEK FOR LAST THREE YEARS......TYPICAL SCAM LOOKS LIKE POOR JANE FREDERICK NEVER GETS HER BOXES EITHER..

 Got more information on this Scam? Add to Report