An
Email with the Subject "Payment Via Express Mail Service (EMS)" was
received in one of Scamdex's honeypot email accounts on Tue, 11 Jun 2019 07:49:38 -0400
and has been classified as a Generic Scam Email.
The sender shows as "Dr. Donald Duke" <geral@humanizar-te.pt>.
The email address was probably spoofed. Do not reply to or contact any persons or organizations referenced in
this email, or follow any URLs as you may expose yourself to scammers and, at the very least, you will be
added to their email address lists for spam purposes.
Scam TagCloud
generalfinance0 atm chiefexpressbankbarclaycontactpaymentcustomerserviceon behalf of transferfundcustomsentmaildeliverybank america,chase bank the bank their bank any bank sincerely(ems)dear mr roran lewisa
NO CHART DATA - EMAIL HAS NOT YET BEEN ANALYSED
Scam Email Headers
This a (redacted) view of the raw email headers of this scam email.
Personally Identifiable Information (PII) has been suppressed, but can be
supplied as received to appropriate investigating or law enforcement agencies on request.
EEEEEstdClass Object
(
[return-path:] => Array
(
[0] =>
[1] =>
)
[delivered-to:] => newblood@scamdex.com
[received:] => Array
(
[0] => from edie.newsblaze.comby edie.newsblaze.com with LMTPid Im5pCFKV/1xIcwAApOa+tw(envelope-from )for ; Tue, 11 Jun 2019 07:49:38 -0400
[1] => from vm01.wecreateyou.biz ([185.15.20.219]:40990)by edie.newsblaze.com with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)(Exim 4.92)(envelope-from )id 1hafHV-0007ZT-VJfor submissions@scamdex.com; Tue, 11 Jun 2019 07:49:38 -0400
[2] => from [127.0.0.1] (port=32976 helo=vm01.wecreateyou.biz)by vm01.wecreateyou.biz with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)(Exim 4.92)(envelope-from )id 1hafBs-00049b-8m; Tue, 11 Jun 2019 12:43:53 +0100
[3] => from [41.215.173.87] ([41.215.173.87]) by vm01.wecreateyou.biz(Horde Framework) with HTTPS; Tue, 11 Jun 2019 12:43:47 +0100
)
[envelope-to:] => submissions@scamdex.com
[delivery-date:] => Tue, 11 Jun 2019 07:49:38 -0400
[dkim-signature:] => v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;d=humanizar-te.pt; s=default; h=MIME-Version:Content-Type:Reply-to:Subject:To:From:Message-ID:Date:Sender:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive;bh=CPOM4AIdrJV/Nm1fcP7CCnwEAFkX7dI6QLC9MdjH9qY=; b=ZY0vkzMb+6E1bF4pV8ruHnVKduzgunxUgNgJzbLMrJoKTvPD4jGH2CfjpK+jefREPLTVOZL+zE4gxdARhM/zX+NZSpf6jtHYukIMfMlyaBPTq61qVN7oDhKzAcXtohI3sX8/hAuIQ10LYdG2k2z2KXucHyDfS6vauCp/C6lCeEI=;
[date:] => Tue, 11 Jun 2019 12:43:47 +0100
[message-id:] => <20190611124347.Horde.6Y0kPEi2nr3HYjcI-t7PFXz@vm01.wecreateyou.biz>
[from:] => "Dr. Donald Duke"
[to:] =>
[subject:] => Payment Via Express Mail Service (EMS)
[reply-to:] => roranlewisa@humanizar-te.pt
[user-agent:] => Horde Application Framework 5
[content-type:] => text/plain; charset=utf-8; format=flowed; DelSp=Yes
[mime-version:] => 1.0
[content-disposition:] => inline
[x-outgoing-spam-status:] => No, score=2.7
[x-antiabuse:] => Array
(
[0] => This header was added to track abuse, please include it with any abuse report
[1] => Primary Hostname - vm01.wecreateyou.biz
[2] => Original Domain - scamdex.com
[3] => Originator/Caller UID/GID - [47 12] / [47 12]
[4] => Sender Address Domain - humanizar-te.pt
)
[x-get-message-sender-via:] => vm01.wecreateyou.biz: authenticated_id: geral@humanizar-te.pt
[x-authenticated-sender:] => vm01.wecreateyou.biz: geral@humanizar-te.pt
[x-source:] =>
[x-source-args:] =>
[x-source-dir:] =>
)
Domain Names used for collecting scam email ("Honeypot email accounts") have been obscured and replaced with the token 'HUN1P0T'
Community Action - SPAM/non-Scam Report
Occasionally, incorrectly categorized emails get into the Scamdex Scam Email Database and need to be removed. If this
email has Personally Identifiable Information (PII), or is, in your opinion, from a bona-fide entity, let us know.
Scamdex will, as soon as is practicable, take-down any emails that in our opinion should not
be in our database. Note that ALL emails in the Scamdex Scam Email Database were received as Unsolicited Commercial Email, aka UCE or
SPAM, via unpublished 'Honeypot' email addresses.
Express Mail Service (EMS)
Ghana Post Head Office
Address: G. P. O., Asafoatse
Nettey Road, Accra, Central, Ghana.
Date: 10/6/2019
PAYMENT VIA EXPRESS MAIL SERVICE.
Dear Sir/ Madam,
Ghana brings out this Express Mail Service (EMS) to deliver the
different firms and companies to the rightful owner in any countries.
bank,Barclays bank,BANK OF AMERICA,chase bank and other firms to
(EMS), So that they can be mailed out to the rightful owners, because
customers and the (FG) Federal Government of Ghana that people are not
are not getting their Bank Draft and Atm Cards due to the fact that
by some of this delivery companies, firms and other sectors and
handle.
they are sealed and we don't know who and where they belong to we are
regarding any Bank Draft and Atm Cards please contact the Chief
his ready to Mail them to you this was the order given to me and the
Here is my contact Number and email address
Full Names: - Mr Roran Lewisa
Valid Contact: - roranlewisa@humanizar-te.pt
Tel: +233554661614
draft and Atm cards to the rightful owner as we are not allowed to
have not yet received their funds either in Bank Draft or Atm Cards,
you.
Sincerely
General Human Resource
and Administration.
Express Mail Service (EMS) Ghana.
+233554661614
Express Mail Service (EMS)
Ghana Post Head Office
Address: G. P. O., Asafoatse
Nettey Road, Accra, Central, Ghana.
Date: 10/6/2019
PAYMENT VIA EXPRESS MAIL SERVICE.
Dear Sir/ Madam,
On behalf of the Minister of Finance and other private sectors here in
Ghana brings out this Express Mail Service (EMS) to deliver the
Unfinished Transfer of Funds and Gratuity that is in the custody of
different firms and companies to the rightful owner in any countries.
I am Dr.Donald Duke representing the Express Mail Service (EMS).
The Minister of Finance has ordered the FedEx, Dhl, USPS,UPS, zenith
bank,Barclays bank,BANK OF AMERICA,chase bank and other firms to
release the bank draft and Atm cards to the Express Mail Service
(EMS), So that they can be mailed out to the rightful owners, because
there are too many complains coming to our desk from different
customers and the (FG) Federal Government of Ghana that people are not
getting their Instrument to cash their funds and gratuity,e.g people
are not getting their Bank Draft and Atm Cards due to the fact that
people are not meeting up with the required demands and amount imposed
by some of this delivery companies, firms and other sectors and
constant require of fees that are too much for people to handle or
handle.
We have series of Bank Drafts and Atm Cards here in our custody and
they are sealed and we don't know who and where they belong to we are
getting in touch with you to know if you have ever received an email
regarding any Bank Draft and Atm Cards please contact the Chief
Dispatch Officer of EMS of Ghana Post, Mr Roran Lewisa , back as he
his ready to Mail them to you this was the order given to me and the
company by the Minister of Finance here in Ghana.
Here is my contact Number and email address
Full Names: - Mr Roran Lewisa
Valid Contact: - roranlewisa@humanizar-te.pt
Tel: +233554661614
Our terms and condition for this service is for us to get the bank
draft and Atm cards to the rightful owner as we are not allowed to
open them as they are sealed and we need honest people that knows they
have not yet received their funds either in Bank Draft or Atm Cards,
So we are expecting to hear from you, As we know no Information about
you.
Sincerely
General Human Resource
and Administration.
Express Mail Service (EMS) Ghana.
+233554661614
