Are 419 scammers learning?
Yes... as usual, I receive a lot of emails, many of which are from scammers. Each day, I delete most of the emails in my mailbox. Now, I'm just waiting to retire!
The trend has usually been to talk about all your problems, how poor you are, how it is impossible for you to get the millions of $$$ from your defunct dad (rarely the mom's rich... ain't weird? I thought the Queen was loaded!)
But lately, for about 2 months or so, I started getting emails that were very very very short. I have had those for the blue pills forever, since there isn't much to say in that case, but for the scams, I don't recall seeing much of those.
There is an example:
You have a Western Union Money Transfer of $ 85,000:00.Confirm this receipt with your name and country Send details to Mr. Harry Owen E-mail: wudept3@w.cn
Yes! Just a couple of sentences, how to contact the guy. Voilà. As you may notice, it is not for millions, but many people would certainly appreciate a little hand of $85k here and there! To finish paying for your Porsche, you know...
I think that makes it a lot easier on them. I posted another such email and tried the guy by sending a reply. His reply was the usual long 419 scam version. In other words, those are the same people who started to understand that it would be a lot more effective to write small emails first to catch a few fish, instead of writing the long version immediately and get their account banned immediately. Especially because anti-spam systems will have a much harder time to stop such emails.
As usual, watch out! For most of you, just ignore those mails... and remember that some of these surprises come in your regular mailbox (snail mail). It is not just an Internet phenomenon.
The following is the email including the header.
Return-Path: <bsde@telefonica.net> X-Original-To: alexis@halk.m2osw.com Delivered-To: alexis@halk.m2osw.com Received: from mail.m2osw.com (jc [69.55.233.23]) by halk.m2osw.com (Postfix) with ESMTP id 612A5AF03A for <alexis@halk.m2osw.com>; Mon, 26 Apr 2010 16:46:10 -0700 (PDT) Received: from IMPaqm3.telefonica.net (impaqm3.telefonica.net [213.4.138.11]) by mail.m2osw.com (Postfix) with ESMTP id BB3AE42A2B8 for <alexis@m2osw.com>; Mon, 26 Apr 2010 16:48:34 -0700 (PDT) Received: from IMPmailhost4.adm.correo ([10.20.102.125]) by IMPaqm3.telefonica.net with bizsmtp id APdF1e0042iL0W23PPgahD; Tue, 27 Apr 2010 01:40:34 +0200 Received: from wm1 ([10.20.100.200]) by IMPmailhost4.adm.correo with BIZ IMP id APgZ1e00G4KQpRW1kPgZnG; Tue, 27 Apr 2010 01:40:34 +0200 X-TE-authinfo: authemail="??" |auth_email="??" X-TE-AcuTerraCos: auth_cuTerraCos="tnet-wm" Received: from (212.116.220.149) by wmail15.telefonica.net with HTTP (authenticated as BSDE@telefonica.net); Tue, 27 Apr 2010 01:40:33 +0200 Message-ID: <31723036.1411381272325233919.JavaMail.root@wm1> Date: Tue, 27 Apr 2010 01:40:33 +0200 (CEST) From: "BSDE@telefonica.net" <BSDE@telefonica.net> Reply-To: "BSDE@telefonica.net" <BSDE@telefonica.net> Subject: Confirm Receipt MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_Part_169179_3561046.1272325233916" X-TE-Farm: Tnet2 To: undisclosed-recipients:; ------=_Part_169179_3561046.1272325233916 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit You have a Western Union Money Transfer of $ 85,000:00.Confirm this receipt with your name and country Send details to Mr. Harry Owen E-mail: wudept3@w.cn ------=_Part_169179_3561046.1272325233916 Content-Type: text/html;charset="UTF-8" Content-Transfer-Encoding: 7bit You have a Western Union Money Transfer of $ 85,000:00.Confirm this receipt with your name and country Send details to Mr. Harry Owen E-mail: wudept3@w.cn ------=_Part_169179_3561046.1272325233916--