It's going to be a rough morning for some Nigerian scammer.

Teach me your ways

The practice of "scambaiting" has been around on the internet for a few years now. Five years ago, I had a lot more time on my hands and took it up as a hobby but gradually stopped as it requires diligence and more creativity than I have. While the vast majority of people with internet access are now wise to their scams, the scammers understand that this is simply a game of numbers. The ultimate goal of scambaiting is to eat up as much time and effort of the scammers as possible. This is time that would otherwise be directed at a more naive victim. One of the best sites for tips, strategy etc. is http://419eater.com I was not as successful as others in sending these people "on safari" (a wild goose chase in search of money or goods) I did keep a few of these criminals occupied for several months. One of my favorite strategies is to set up a fake church (they are more than willing to become members) and have them perform specific acts of devotion in order to receive monetary help that somehow never arrives. Here is an example of a prized "trophy".
Enjoy!

anymouse said:

Hmm, get you off his list? How about I get his list off the internet for a couple days and cost him money.

I didn't think anybody would be watching or subbing this but I'll update you on what has happened so far.
Saturday I decided to enlist the help of a friend to do the same thing as before with his new list. I also typed up a new email from that hastily written one. My friend arrived late so we never finished by the time the server shut down. It seems the server actually shuts down every night at 10:00pm eastern. The next morning I logged in early around 0600 and finished sending. Not a half hour after I cleaned up my traces I see activity. The spammer had logged in at around 0730 and started sending his spam. I noticed this time he was deleting his sent messages after every few sends so I quickly went into the trash and recovered them all. Then I caught up with him and started copying them down as he was sending. After he logged off I launched the same email again after a couple minutes. Took him about 3x as long to send it all as it took me to undo it.

Now for the getting him off the internet part. I think I might perform an experiment. I'll just type up an email explaining that I broke into this spammer's account. Remember I have copied his IP address with a timestamp. Provide this evidence in the email as well as the times he logs on and where he goes which they can easily pull from router logs. The ISP is in Nigeria which means they have virtually no law enforcement willing to enforce internet crimes. However the VisaFone has a specific spam complaint email address, probably because they don't like spammers using large amounts of bandwidth and answering complaints is a waste of manhours.
A few people are responding. If you think of it, most people will ignore whatever was sent and delete it and I'll only see the few that bother to type something. If the title catches their eye and was sent from an address they just got spam from asking to help bust the spammer, I might have enough people forward a pre-typed complaint to the address I specify. If the spammer disappears for a few days while he finds another ISP then the conclusion to the experiment is LOL.

Another alternate way to dick around with him and waste his time would be perhaps to contact him and see if I can sell him a large email list on the cheap or maybe if he does not understand how law enforcement works, I could threaten him with inside information he probably does not expect others to have like how he is living somewhere within Port Harcourt, Victoria Island Nigeria. The cell tower is at 12, Ologun Agbaje Street. Who knows maybe he's dumb enough to buy back his own list or at least I could make him look like a fool and maybe discourage him from this line of work a little bit by scaring him into thinking Mossad or the CIA is after him.

Here are some of the replies people have been giving. Again it's all pointless with the volume of emails in there.


Below is a copy of all of the emails he uses. I gave them titles of my own however in retrospect I should have just used the email title.
If you've never seen them, they are always poorly typed and impersonal. It is clear that the Nigerians have no understanding of western society. I'm amazed that these scams ever work.

Code:

IDIOT LOTTERY 
========
You have been approved to be paid $9,000,000.00USD.
From the recently concluded online lottery games.

Send approval code to the online coco coordinator 8T5HGF by
contacting your claim's agent via email:[email protected]


IDIOT LOTTERY2
========
Greetings,
 
You have been choosing by the United Nations Lottery Board in collaboration with ECOWAS For a Random Lottery winnings.
Contact this secured email now for details and claimings.
Note you must reply with the subject 'UNLB'.It is important
Email [EMAIL="[email protected]"][email protected][/EMAIL] )
Regards.




FREE MONEY
==========
Good Day, Let me formally introduce myself to you, my name is Mr. Allen Large. I and my dear wife Violet won a Jackpot Lottery of $11.3 million in July 2010 and have voluntarily decided to donate the sum of $950,000.00 USD to you as part of our own charity project to improve the lot of 5 lucky individuals all over the continents of the world. If you have received this email today then you are one of the lucky recipients and all you have to do is get back to us so that we can send your details to the payout bank. Please provide us your full name, Date of birth, telephone, address, country. You have to contact my private email ( [EMAIL="[email protected]"][email protected][/EMAIL] )




FREE MONEY 2
============
Greetings,

This is a personal email directed to you. Let me formally introduce myself to you, my name is Mr. Allen Large. I and my dear wife Violet won a Jackpot  
Lottery of $11.3 million in July 2010 and have voluntarily decided to donate the sum of $500,000.00 USD to you as part of our own charity project to improve 
the lot of 5 lucky individuals all over the continents of the world. If you have received this email today then you are one of the lucky recipients and all 
you have to do is get back to us so that we can send your details to the payout bank. Please provide us your full name, Date of birth, telephone, address, 
country,. You can verify this by visiting the web pages below.
 
[URL="http://www.dailymail.co.uk/news/article-1326473/Canadian-couple-Allen-Violet-Large-away-entire-11-2m-lottery-win.html"]www.dailymail.co.uk/news/article-1326473/Canadian-couple-Allen-Violet-Large-away-entire-11-2m-lottery-win.html[/URL]

You have to contact my private email*( [EMAIL="[email protected]"][email protected][/EMAIL] )*
Good luck,

Allen and Violet Large
Email: [EMAIL="[email protected]"][email protected][/EMAIL]
 
 

 


Email : [EMAIL="[email protected]"][email protected][/EMAIL]
 
Allen and Violet Large




FREE MONEY3
===========
Clydesdale Bank PLC
International Banking
30 St Vincent Place,
Glasgow,
G1 2HL

Dear Customer,

Re: Authentication to Credit Your Account With £3,800,000.00 POUNDS

We the Management of Clydesdale Bank PLC wish to congratulate and inform you that after the thorough review of your Inheritance/Contract Funds Transfer release documents in conjunction with the World Bank and the International Monetary Fund Assessment Report, your payment file was forwarded to us for immediate transfer of a part-payment of £3,800,000.00 GBP to your designated bank account from their offshore account with us.

The audit report(s) given to us, shows that you have been going through hard times to see to the release of your funds, which has been delayed by some dubious officials.

We therefore advice that you stop further communication with any correspondence outside this office since you do not have to pay to the bank any fee to receive your funds as you have met up with the whole funds transfer requirements.

The only thing required from you is to obtain the Funds Clearance Permit to enable us credit your account directly by telegraphic transfer or through any of our corresponding banks and send copies of the funds transfer release documents to you and your bankers for confirmation.

Should you follow our directives, your funds will be credited and reflect in your bank account within five (5) bank working days from the day you obtain this Funds Clearance Permit.

For further details and assistance on this Remittance Notification, kindly forward your 

FULL NAME:
FULL CONTACT ADDRESS:
PROFESSION/OCCUPATION:
DIRECT TELEPHONES/FAX: 
COUNTRY:

Directly to my private E-mail: [EMAIL="[email protected]"][email protected][/EMAIL] 

Yours truely, 
Mrs. Veronica Samuel
International Banking
Clydesdale Bank PLC
United Kingdom



FREE MONEY4
===========
Unpaid-Beneficiary
It is obvious that you have not received your fund which is to the tune of 20million dollars for more info contact director of payment rev.KOFFI NELSON on +233265053095 with your information wish is Age,Sex,Name,occupation,tel,
Yours.
Mr.Alex-action Johnson
CC: Federal Bureau of Investigation
CC: National Central Bureau of Interpol




PAY MONEY TO NOT WORK FOR A GOLD COMPANY
========================================
Olinga Gold Mining &Sales Company.
A Division of Olinga  family  Limited.
Email: [EMAIL="[email protected]"][email protected][/EMAIL]
Phone:+233 2696949560

 

For a real and legal gold mining and sales company contact Olinga gold mining Limited Company. 

The Olinga gold mining and sales company hereby draft this mail to notify you that the company is in search of people all part of the world who will work as a company representatives under Olinga gold mining and sales company as this is the only way to enable the company  meet up  with the sales target.

 

Olinga mining company is a big mining gold company that invested money into gold mining machines and employed  one hundred and fifty workers who are working in the gold land,which if you are interested to come in person to view the gold land  Olinga company is ready to welcome you and in the case if you wish to go into partnership with  Olinga company both of us can draft an agreement of partnership to enable us move forward for a joint  partnership investment.

 

In the area to work as a sales representative under Olinga mining company in your country or any part of the world,as at last year Olinga gold  mining  company exploits a lot of golds but there  was a low sales due to this low sales  Olinga  Limited  Company  held a board  of directors meetings and as  a  result to this  meeting a suggestion came up that  in order to meet up  with the sales, the company have to search  for trusted people  from any part of the world to work as a sales representatives who will  assist for  sales for the future benefits of  Olinga gold mining company,it is based on this that we are searching for trusted people who can handle this position on behalf of Olinga gold mining company limited.

 

The condition of your service.

 

Olinga gold mining company limited will send you golds through Airway bill  and forward to you the documents for clearance in your country hereafter clearance you  have to sell the golds and work out 15% of the total sales for yourself and then send the remaining to Olinga gold mining company limited.

Any  interested person should fill the under drafted  information and forward it through mail to Olinga gold mining company limited as to enable the company lift the goods for delivery to your country for sales.

 

1 First  Name......................................................
2 Last  Name......................................................
3Address.............................................................
4 Present job position.........................................
5Country..............................................................
6Age.....................................................................
7Sex......................................................................
8 Contact  phone  number....................................

 

CEO. Joe Olinga.

 


NANNY JOB
==========
Hello

Thank you for taking time to read about us. My names are {Gerrard Wilfred} I am searching for an optimistic and loving nanny from any country who can help with the daily routine of raising my gorgeous kids. I live in UK {Leeds} with my two kids without my wife. I am a working professional as a lawyer. I have found memories of sharing our home and family with people looking for new international experience,  We are looking for a nanny that is willing to start as soon as possible, depending how long you are willing to stay. I will provide you with a room and your own Personal toilet and bathroom.I will pay you 1 thousand pounds monthly and a pocket money of 100 pounds weekly so as to enable you study any course that will add more values to your life.

 Your duties involves getting the children up and dressed for school, dropping them off in the morning, and also picking them  after school. Your working hours is 6 hours daily weekdays, while you have Saturdays and Sundays as your free days, We eat healthy, fun living and need someone who has a positive outlook on life. We need help with organizing and keeping the children clothes, room and equipment in order,You Must have a passion for children and earnestly want them to be your first priority, the children school is withing walking distance and on the same street as our house.  Light housekeeping, laundry and grocery shopping during the day is also required. There is a college nearby that offers all kind of English classes, ranging from Language courses to Sports, and everything in between. There are other school and facilities located nearby also.

I look forward to hearing from you and also willing to welcome you in my home as member of my family. I on behalf of my wonderful kids wish you the best in your present endeavors over there in your country and we are also waiting to embrace you with the warmth, love and most importantly the peace that your heart always desires.

Here is my Personal email for quick response. ([email protected])

regards

If anybody wants to reply to those scams to waste his time with fake information or pranks, feel free. Tell me if you can get him to cuss at you.

Click to expand...

It could well be Mossad, CIA, Black Ops, MI... they do far worse- drugs, weapons, abduction for prostitution...they are constantly sucking up money, and this is virtually an unenforced mecca for them. Be careful. You could wind up MIA, and I don't mean Miami if you get my drift. Quit while you're ahead, or still have your head. Check out Project Camelot. She could probably use your head in a much better way

I'll help track ip addresses if you teach me how, I'm an IT major so I might be able to help...

Same fuckers advertise cars in cars dot com and want you to western union funds and they will ship you the car. Try to arrange an inspection and they disappear

My buddy thought an african princess was coming to America to see him and he was going to send her thousands of dollars before I stopped him . I just can't believe how naive people can be .

Bwahahahaha good for you man!

Well I attempted to log into that server today and that account has been closed. My guess is that the university read some of those spam emails (in original form and the fake leaks) that I directed to the university staff email addresses under the common administrative names (admin, security, spam, admissions, and [email protected]) and the Portuguese translated names. Closing the hole on that server (or setting things up so it just ends up happening) was a goal anyway so this agent provocateur's job is complete. I learned a bit about how these guys operate and I can say, they are a direct contrast from credit carders and the more sophisticated spammers who use botnets. Most of those guys seem to be European and North American, are educated more or less, and are very informed about their targets. This guy was probably the least competent online criminal I've seen first hand. That's all folks, it's been fun but there's no way to snoop in on what he's up to since he's no doubt moved on to another open server and unless he reuses his list and I get another mail, I have no idea where he's operating out of now.

I'll help track ip addresses if you teach me how, I'm an IT major so I might be able to help...

Click to expand...

I'm sure you already know the method I was going to tell if you're an IT. Simply reply to the spammers email pretending to be a victim. When he sends a reply check the email header. Most email clients these days obscure that stuff so just google how to view the header in your software. Next you have to check that a proxy is not running on that IP by port scanning and poking around with telnet. If there is no proxy and whois reveals it is a residental internet connection then you most likely either have the culprit or an open wifi network (he was using his cell phone so the former is 90% likely in this case) If it's a home router you can scan it, try to break into it and watch who has logged in and when, etc. That's all getting a little deep and it goes much farther than that but basically check the headers and if you can't figure it out beyond that, most hackers and geeks would be glad to help you expose or hinder a criminal. If you can get information from enough correspondence with a particular scammer/group you can likely map out a little of how/where they work and roughly how many are working on it.

I'm still going to write that shell script over the next week or so (it's BASH btw (google or wik it if you don't know what that is)) and post it to another forum where I know some people that could use that sort of thing, I'll put a copy here for anybody that is interested but be forewarned it is not a cushy refined GUI program where you type something and hit "go"; CLI software requires knowing how to use the keyboard and remembering words instead clicking the mouse, it's not really hard but probably not what most PC users would be used to. If you don't use Linux/BSD/Unix/Mac already or don't want to do a workaround for Windows like installing Cygwin or burning/running a Linux cd just to screw with some spammer or maybe play an email joke on your friends, you can disregard all this.

I'm going to pull a name out of my ass for it here... How about SPRM for (Stupid Pointless Reply Mailer). To simply piece together somewhat reasonable sounding replies from lists of email parts and then send them to the target under bogus email addresses using header forgery (a common tactic for spammers) and/or from a list of pre registered free email addresses (more tedious work on your part but you can see if the spammer is replying. It'll pull a random title from a list you select (E.G. im not sure who you are but maybe i can help u cash in that lotto ticket). The body would be pieced up of something like [100% "greeting of some sort"] [33% (exclusively or) "not sure where we met" OR "I'm an old person bla bla" OR "do you think I can really help?"] and so on until you get a full messages and each one is pseudo-unique. If I can find a function library or command line program somebody has written that can replace words with synonyms, it can be incorporated to make it all the more believable. The more functions and nifty tricks I come up with to put into it will of course make it a more costly endeavour so expect it at first to have non implemented options and be very alpha-ish

Or... Or... you can abuse it to make it look like a bunch of gay people are contacting your homophobic friend or like 70 children think he's their father and then laugh at him the next time you come over his house. I'm almost certain to do this at least once.

Well I'll come back in a few days.

Peace



Edit: Oh yeah, I almost forgot.

My buddy thought an african princess was coming to America to see him and he was going to send her thousands of dollars before I stopped him . I just can't believe how naive people can be .​

Click to expand...

I'm glad you talked him out of it. Most people shrug spammers off saying it never works or that the victims are so stupid that they deserve it, even I've been guilty of this. I often say nature will regulate it's self so let it take it's course, it just does not sit right that some elderly widow might be duped out of her retirement money and end up in a nursing home because she was new to the internet and is used to people of her era being honest or somebody in a small moment of weakness has to learn their lesson by losing money when they could have learned it another way... then again some people can only learn the hard way.
We need to get a soapbox smiley or something in here. Oh well this box I found under my desk should work ⎕
Those who can fight for somebody weaker (not always) practically have the duty to do such in my personal morals at least. This view likely is why I got in school yard fights a lot when I was young and the other kids started thinking of me as a dangerous bad guy or something(which is pretty backwards when you think about it) so I mostly had a motley group of mostly crazy friends, many of which being people I've defended from jackasses who fucking asked for it. Literally fighting people and breaking or pushing the law online is best left to the expendables but help others however you can and the world will decline at a slightly lower rate.

More peace

Edit: Ahaha, haha, I can't confirm that this story is true but it was a damn good read. http://www.419eater.com/html/joe_eboh.htm
Thanks Carl Spackler for that glorious site. Hell that seems like a fun game. There should be a point system.