Scam Tip Report #93170 - CHANGE OF ACCOUNT


Scam ReporterScam Tips Received
Falcons-fan
Lilburn, GA, United States
2018-10-11 00:30:59
Nigerian/419 Scam
+4 CHANGE OF ACCOUNT 
 Scammer
  Information
Name:
Mr.sithole Brown
Email Address:
capt.donaldcamp@walla.com
Country of Scam:
United States (US)
This is an advanced fee scam...I also included the full headers. Law enforcement can get them by contacting Scamalot. Please read about the scam below.


NEDBANK OF SOUTH AFRICA

HEAD OFFICE REPUBLIC OF SOUTH AFRICA,
ILOVO JOHANNESBURG GAUTENG
Bill and Exchange Manager/ Financial Control Dept

Private Banking Section Ext, 3

CHANGE OF ACCOUNT TO TRANSFER FUNDS

Dear Bonafide Beneficiary

I wish to inform you that from the records of outstanding foreign payments due for release to you before we have just received an account from one Mr Robert Marengere of Canada stating that you have authorized him to forward this account with Citi Bank for immediate transfer of your funds as your next of kin so we have decided to confirm from you before any step.

So kindly confirm to us urgently before the transfer will take place as we shall not hold responsible for it if you did not respond quickly to know the truth because if you did not confirm within 24hrs from now then we shall carry on with the transfer process.

And if you confirm that he is not your next of kin or never authorized him then you get an affidavit immediately .

.

Note: the payment is schedule to hold within 72 hours immediately you get back to us with the above mention requirement. You are advice to contact me on the direct stated above number and E-mail, expecting your immediate response.

We look forward to hearing from you to enable us serve you better.

For and on Behalf of,

Nedbank Of South Africa.

Yours faithfully,

Mr.sithole Brown

Head, Financial Controller Manager.

Nedbank of South Africa .
Email-Nedbank@emailn.de

PLEASE READ THE WARNING BELOW

Never use Money Gram,Western Union,Ria to send a fee to strangers. Never buy an i-tunes card,Amazon card(s) to send to scammers.Never use bitcoin and send the wallet/address to scammers. If you do,it is gone for ever. If you must send the money (please don't), insist on Using direct bank transfer only. Send the money to a US,UK or South Africa bank account only. You could get your money back by following the advice below..
If you send money to this scammer or to any scammer,please
1.file a police report
2. file a complaint at www.ic3.gov and include the case number of the police report
Follow Ups/Extra Information. Most recent is listed first.
Sir please the affidavit fee is the $870 and the attorney's fee is $210 so the total fee is $1,080 I just realize now so if you said I should send the bank details I will do that now waiting to hear from you sir. Regards Brown Sithole
PLEASE READ THE WARNING BELOW
Never use Money Gram,Western Union,Ria to send a fee to strangers. Never buy an i-tunes card,Amazon card(s) to send to scammers.Never use bitcoin and send the wallet/address to scammers. If you do,it is gone for ever. If you must send the money (please don't), insist on Using direct bank transfer only. Send the money to a US,UK or South Africa bank account only. You could get your money back by following the advice below.. If you send money to this scammer or to any scammer,please 1.file a police report 2. file a complaint at www.ic3.gov and include the case number of the police report

Scam Email
Subject: Re: Re: Re: Re: Re: Re: CHANGE OF ACCOUNT
From: "Mr.sithole Brown" delivered-to:
received: from mail.emailn.de (46.182.20.122 [46.182.20.122]) by mail.emailn.de (b1gMailServer) with ESMTP id 6FE15A34 for <@gmail.com>; T...
arc-seal: i=1; a=rsa-sha256; t=1539274262; cv=none; d=google.com; s=arc-20160816; b=gJLsjT7IPBLKstuu+yTNIdF0ikfSxLM3OydTozdipZ...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-disposition:content-transfer-encoding:refere...
arc-authentication-results: i=1; mx.google.com; spf=pass (google.com: domain of nedbank@emailn.de designates 46.182.20.28 as permitted sender) smtp.mai...
return-path:
received-spf: pass (google.com: domain of nedbank@emailn.de designates 46.182.20.28 as permitted sender) client-ip=46.182.20.28;
authentication-results: mx.google.com; spf=pass (google.com: domain of nedbank@emailn.de designates 46.182.20.28 as permitted sender) smtp.mailfrom...
date: Thu, 11 Oct 2018 18:11:01 +0200
mime-version: 1.0
message-id: <6b888cf2f76efdc21de7dcea4c9e6403@mail.emailn.de>
reply-to: "Mr.sithole Brown"
in-reply-to:
references: content-type: text/html; charset="UTF-8"
content-transfer-encoding: 8bit
content-disposition: inline

NOBODYLINES

Falcons-fan   (Lilburn, GA, United States) Added the following extra information on :2018-10-11 16:21:49
 Scammer
  Information
Name:
Name Unknown
Email Address:
Nedbank@emailn.de
X-Sender-IP: 197.210.8.180
Sir you are going to get the affidavit from the supreme court of justice here in South Africa through our legal attorney which will cost you a little fee to get it and as soon as we get that we shall proceed to process your fund transfer and make sure that your bank details are send to us sir. Regards Brown Sithole
PLEASE READ THE WARNING BELOW
Never use Money Gram,Western Union,Ria to send a fee to strangers. Never buy an i-tunes card,Amazon card(s),don't use shoprite to send money to send to scammers.Never use bitcoin and send the wallet/address to scammers. If you do,it is gone for ever. If you must send the money (please don't), insist on Using direct bank transfer only. Send the money to a US,UK or South Africa bank account only. You could get your money back by following the advice below.. If you send money to this scammer or to any scammer,please 1.file a police report 2. file a complaint at www.ic3.gov and include the case number of the police report

Scam Email
Subject: Re: Re: Re: Re: CHANGE OF ACCOUNT
From: "Mr.sithole Brown" delivered-to:
received: from mail.emailn.de (46.182.20.122 [46.182.20.122]) by mail.emailn.de (b1gMailServer) with ESMTP id 6DDE6584 for <@gmail.com>; T...
arc-seal: i=1; a=rsa-sha256; t=1539273056; cv=none; d=google.com; s=arc-20160816; b=TEij5NYVR0a3PaeirPiQ0JZiMUCK1GFWgUKIqn4dsS...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-disposition:content-transfer-encoding:refere...
arc-authentication-results: i=1; mx.google.com; spf=pass (google.com: domain of nedbank@emailn.de designates 46.182.20.28 as permitted sender) smtp.mai...
return-path:
received-spf: pass (google.com: domain of nedbank@emailn.de designates 46.182.20.28 as permitted sender) client-ip=46.182.20.28;
authentication-results: mx.google.com; spf=pass (google.com: domain of nedbank@emailn.de designates 46.182.20.28 as permitted sender) smtp.mailfrom...
date: Thu, 11 Oct 2018 17:50:55 +0200
mime-version: 1.0
message-id: <4b9d053d67c18dcf709241a0ac955012@mail.emailn.de>
reply-to: "Mr.sithole Brown"
in-reply-to:
references: <^DFFEF7D93444D781744CEC0154ADB33EB2BB7D08@walla.com> content-type: text/html; charset="UTF-8"
content-transfer-encoding: 8bit
content-disposition: inline

NOBODYLINES

Falcons-fan   (Lilburn, GA, United States) Added the following extra information on :2018-10-11 16:11:06
 Scammer
  Information
Name:
Brown Sithole
Email Address:
Nedbank@emailn.de
Recipient IP 197.210.8.180 NIGERIA IP Block Assigned for MTN N Eastern POP
Sir you are paying the lawyer total sum of R6,700 and you will send it to him via his account details or you can send it via Shoprite depending the one you want Regards Brown Sithole
PLEASE READ THE WARNING BELOW
Never use Money Gram,Western Union,Ria to send a fee to strangers. Never buy an i-tunes card,Amazon card(s),don't use shoprite to send money to send to scammers.Never use bitcoin and send the wallet/address to scammers. If you do,it is gone for ever. If you must send the money (please don't), insist on Using direct bank transfer only. Send the money to a US,UK or South Africa bank account only. You could get your money back by following the advice below.. If you send money to this scammer or to any scammer,please 1.file a police report 2. file a complaint at www.ic3.gov and include the case number of the police report
To Nedbank@emailn.de From "" <> Subject Re: CHANGE OF ACCOUNT Sent on 11-Oct-2018 at 10:10:09 AM (GMT-05:00)
Email Tracking Details Opened at 11-Oct-2018 at 10:12:30 AM (GMT-05:00) Location , (80% likelihood) Recipient IP 197.210.8.180 Language en-US Web Browser Chrome 46.0.2486.0 Operating System Windows User Agent String Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/46.0.2486.0 Safari/537.36 Edge/13.10586 Read Duration Please see the live tracking details of this email for email read duration. Referer Note In case of Hotmail or Gmail Recipient, Location and IP address related information will not be accurate because Hotmail and Gmail do not disclose the actual IP adress of recipient instead, they provide IP adress and location of their servers

Scam Email
Subject: Re: Re: Re: Re: Re: Re: CHANGE OF ACCOUNT
From: "Mr.sithole Brown" delivered-to:
received: from mail.emailn.de (46.182.20.122 [46.182.20.122]) by mail.emailn.de (b1gMailServer) with ESMTP id 68FE6F60 for <@gmail.com>; T...
arc-seal: i=1; a=rsa-sha256; t=1539261399; cv=none; d=google.com; s=arc-20160816; b=KzAz3Y2xU2WRwZqrTiGYoVL7ds1lSx7HcCxL5uurB5...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-disposition:content-transfer-encoding:refere...
arc-authentication-results: i=1; mx.google.com; spf=pass (google.com: domain of nedbank@emailn.de designates 46.182.20.28 as permitted sender) smtp.mai...
return-path:
received-spf: pass (google.com: domain of nedbank@emailn.de designates 46.182.20.28 as permitted sender) client-ip=46.182.20.28;
authentication-results: mx.google.com; spf=pass (google.com: domain of nedbank@emailn.de designates 46.182.20.28 as permitted sender) smtp.mailfrom...
date: Thu, 11 Oct 2018 14:36:38 +0200
mime-version: 1.0
message-id: <6d24c38828f8e9244f482eb3875046b9@mail.emailn.de>
reply-to: "Mr.sithole Brown"
in-reply-to:
references: content-type: text/html; charset="UTF-8"
content-transfer-encoding: 8bit
content-disposition: inline

NOBODYLINES

Falcons-fan   (Lilburn, GA, United States) Added the following extra information on :2018-10-11 15:24:13
 Scammer
  Information
Name:
Name Unknown
Email Address:
Nedbank@emailn.de
X-Sender-IP: 197.210.54.251 Scammer IP Block NIGERIA ISP: IMS Implementation
did you in anyway authorize Robert to be your next of kin before we transfer to him we want to be sure as all the procedures has been on process so we need urgent response from you Regards Brown Sithole

Scam Email
Subject: Re: Re: CHANGE OF ACCOUNT
From: "Mr.sithole Brown" delivered-to:
received: from mail.emailn.de (46.182.20.122 [46.182.20.122]) by mail.emailn.de (b1gMailServer) with ESMTP id 4F689167 for <>; Thu, 11 Oct...
arc-seal: i=1; a=rsa-sha256; t=1539247849; cv=none; d=google.com; s=arc-20160816; b=qwDzC/HK72km2pNehgfNW/AcCGiA9lv5i1lB4O1BbS...
arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-disposition:content-transfer-encoding:refere...
arc-authentication-results: i=1; mx.google.com; spf=pass (google.com: domain of nedbank@emailn.de designates 46.182.20.28 as permitted sender) smtp.mai...
return-path:
received-spf: pass (google.com: domain of nedbank@emailn.de designates 46.182.20.28 as permitted sender) client-ip=46.182.20.28;
authentication-results: mx.google.com; spf=pass (google.com: domain of nedbank@emailn.de designates 46.182.20.28 as permitted sender) smtp.mailfrom...
date: Thu, 11 Oct 2018 10:50:49 +0200
mime-version: 1.0
message-id:
reply-to: "Mr.sithole Brown"
in-reply-to:
references:
content-type: text/html; charset="UTF-8"
content-transfer-encoding: 8bit
content-disposition: inline

NOBODYLINES

Falcons-fan   (Lilburn, GA, United States) Added the following extra information on :2018-10-11 14:13:22
 Scammer
  Information
Name:
Name Unknown
Email Address:
Nedbank@emailn.de

 Got more information on this Scam/Scammer?
 Problems with this Report? Let us know


Since you’re here …
we have a small favour to ask. More people are visting Scamdex and Scamalot than ever but advertising revenues are falling fast and we have no 'product' to sell. And unlike many informational websites, we haven’t put up a paywall or membership barrier – we want to keep our site as open as we can. So you can see why we need to ask for your help. Scamdex/Scamalot websites takes a lot of time, money and hard work to keep running. We do this because we hate to see our fellow humans getting scammed out of their hard-earned money by low-lives.
Consider switching off your AdBlocker (if you use one) or contributing directly by one of the links below. Thank you for reading!
Ad Blocker Detected
Our website is made possible by displaying online advertisements to our visitors.
Please consider supporting us by disabling your ad blocker.
Thanks!
Scamdex
PING