Post by kas on Jul 24, 2012 20:00:06 GMT -5
Ever get an email saying that you haven't picked up your package or you have not completed the transfer?
I get these a lot.
Here is one:
First: Undisclosed recipients? It should only be sent to you and not everyone .. it is how spammers send sometimes to a huge list of people at once to think it was only sent to them but that they are "kind" enough to use BBC for your own privacy and security. In actuality it is so that you don't suspect their email as spam.
2nd: Looking at the source it is bad enough that the reply-to email is different than the from email but worse that both are not even from Western Union. Possibly hacked email accounts or temporary ones made up for this purpose.
3rd: The subject line is one that Western Union would never use and it kind of a scare tactic to get you to want to check out the email thinking you forgot something and better check it out.
4th: The first image in the email is actually linked through google searches
5th: The 2nd image is also not hosted on the Western Union site but instead on a hacked WordPress blog:
6th: The email signature is:
Definitely NOT Western Union.
7th: $1,500,000.00 USD?? If it is too good to be true, it IS too good to be true .. meaning it is FAKE! Do not trust! This is just to make greed over take your senses so you don't listen to the little voice that says "are you CRAZY!?!? Do not believe this email! Delete now!"
8th: Need more info? Western Union needs THIS information?
I don't THINK so! Westernunion never send their users emails requesting personal details in this way.
9th: Love the name at the bottom who is supposedly the "MANAGEMENT OF WESTERN UNION MONEY TRANSFER, OFFICE BENIN BRANCH"
Notice it says Rev.? That stands for Reverend. See if this phishing email was sent from Nigeria Africa, there they tend to hold Reverends up highly and think that other countries are the same and that you will think that the sender must be honest if he is a Reverend. However, anyone who works at Western Union would not be also a Reverend or sign their name as such.
I get these a lot.
Here is one:
from: Western Union® cus069@peoplepc.com
reply-to: Western Union® <transfer014@blumail.org>
to: undisclosed recipients
date: 24 July 2012 10:47
subject: You have a pending transfer with us.
Received: from elasmtp-junco.atl.sa.earthlink.net (elasmtp-junco.atl.sa.earthlink.net. [209.86.89.63])
Dear Customer,
There is an issue with the WESTERN UNION MONEY TRANSFER in the amount of $1,500,000.00 USD directed in cash credited to file WUMT/90231108/12, at the owner of this email address. The International Monetary Fund contacted us for your compensation a couple of hours ago due to your allocated security code.
They said that they choose to send it to an email address instead of a name. We are unable to complete a transfer directed at an email address, so we require some more information in order to complete this transfer.
FULL NAME:
FULL CONTACT ADDRESS:
MOBILE PHONE NUMBER:
OCCUPATION:
MARITAL STATUS AND AGE:
In order to resolve this problem, please email via Western Union Solicitors Fund Verification Department: ( transfer014@blumail.org ). As soon as this information is received, and you complied with the requirements of payment of the western union charges, payment will be made to your nominated bank account or at the counter directly from the Western Union transferring Bank. When emailing, please use reference number 450-247 for our mutual convenience.
THE MANAGEMENT OF WESTERN UNION MONEY TRANSFER, OFFICE BENIN BRANCH.
Sincerely,
Rev. Lee Benson
E-Mail: (transfer014@blumail.org)
Phone:+229 97626788
reply-to: Western Union® <transfer014@blumail.org>
to: undisclosed recipients
date: 24 July 2012 10:47
subject: You have a pending transfer with us.
Received: from elasmtp-junco.atl.sa.earthlink.net (elasmtp-junco.atl.sa.earthlink.net. [209.86.89.63])
Dear Customer,
There is an issue with the WESTERN UNION MONEY TRANSFER in the amount of $1,500,000.00 USD directed in cash credited to file WUMT/90231108/12, at the owner of this email address. The International Monetary Fund contacted us for your compensation a couple of hours ago due to your allocated security code.
They said that they choose to send it to an email address instead of a name. We are unable to complete a transfer directed at an email address, so we require some more information in order to complete this transfer.
FULL NAME:
FULL CONTACT ADDRESS:
MOBILE PHONE NUMBER:
OCCUPATION:
MARITAL STATUS AND AGE:
In order to resolve this problem, please email via Western Union Solicitors Fund Verification Department: ( transfer014@blumail.org ). As soon as this information is received, and you complied with the requirements of payment of the western union charges, payment will be made to your nominated bank account or at the counter directly from the Western Union transferring Bank. When emailing, please use reference number 450-247 for our mutual convenience.
THE MANAGEMENT OF WESTERN UNION MONEY TRANSFER, OFFICE BENIN BRANCH.
Sincerely,
Rev. Lee Benson
E-Mail: (transfer014@blumail.org)
Phone:+229 97626788
First: Undisclosed recipients? It should only be sent to you and not everyone .. it is how spammers send sometimes to a huge list of people at once to think it was only sent to them but that they are "kind" enough to use BBC for your own privacy and security. In actuality it is so that you don't suspect their email as spam.
2nd: Looking at the source it is bad enough that the reply-to email is different than the from email but worse that both are not even from Western Union. Possibly hacked email accounts or temporary ones made up for this purpose.
3rd: The subject line is one that Western Union would never use and it kind of a scare tactic to get you to want to check out the email thinking you forgot something and better check it out.
4th: The first image in the email is actually linked through google searches
http://www.google.com/i=
mgres?imgurl=3Dhttp://www.festivalsegou.org/logo%20western%20union.jpg&=
imgrefurl=3Dhttp://www.festivalsegou.org/Festival,%20textpartners.htm&h=
=3D37&w=3D146&sz=3D21&tbnid=3DkzwP-QhFmZ0J:&tbnh=3D37&t=
bnw=3D146&prev=3D/images?q=3Dwestern+union+logo&sa=3DX&oi=3Dima=
ge_result&resnum=3D1&ct=3Dimage&cd=3D1" height=3D"37" alt=3D"ht=
tp://www.google.com/imgres?imgurl=3Dhttp://www.festivalsegou.org/logo%20wes=
tern%20union.jpg&imgrefurl=3Dhttp://www.festivalsegou.org/Festival,%20t=
extpartners.htm&h=3D37&w=3D146&sz=3D21&tbnid=3DkzwP-QhFmZ0J=
:&tbnh=3D37&tbnw=3D146&prev=3D/images?q=3Dwestern+union+logo&am=
p;sa=3DX&oi=3Dimage_result&resnum=3D1&ct=3Dimage&cd=3D1" sr=
c=3D"http://www.google.com/images?q=3Dtbn:kzwP-QhFmZ0J:www.festivalsegou.or=
g/logo%252520western%252520union.jpg5th: The 2nd image is also not hosted on the Western Union site but instead on a hacked WordPress blog:
http://www.lifeonourown.com/wp-content/uploads/2009/04/mellow-yellow-monday-western-union-money-transfer-office-dsc_9892.jpg6th: The email signature is:
________________________________________
PeoplePC Online
A better way to Internet
http://www.peoplepc.comDefinitely NOT Western Union.
7th: $1,500,000.00 USD?? If it is too good to be true, it IS too good to be true .. meaning it is FAKE! Do not trust! This is just to make greed over take your senses so you don't listen to the little voice that says "are you CRAZY!?!? Do not believe this email! Delete now!"
8th: Need more info? Western Union needs THIS information?
FULL NAME:
FULL CONTACT ADDRESS:
MOBILE PHONE NUMBER:
OCCUPATION:
MARITAL STATUS AND AGE: I don't THINK so! Westernunion never send their users emails requesting personal details in this way.
9th: Love the name at the bottom who is supposedly the "MANAGEMENT OF WESTERN UNION MONEY TRANSFER, OFFICE BENIN BRANCH"
Sincerely,
Rev. Lee BensonNotice it says Rev.? That stands for Reverend. See if this phishing email was sent from Nigeria Africa, there they tend to hold Reverends up highly and think that other countries are the same and that you will think that the sender must be honest if he is a Reverend. However, anyone who works at Western Union would not be also a Reverend or sign their name as such.
Attachments:
